Search for user sessions
Find user sessions faster by filtering on session-level details and on unindexed tags.
This feature is in a Controlled Availability release. It's enabled for select customers in Splunk realms eu0, us0 and us1 only.
In the Controlled Availability release stage, Splunk products may have limitations on customer access, features, maturity, and regional availability. For additional information on Controlled Availability please contact your Splunk representative.
Features
The enhanced session search UI provides the following features to enable teams to quickly find the most relevant sessions during investigations:
- Complete search results and faster performance
- Previously, session search was limited to matches from the first 1,000 spans, which could cause important sessions to be missed. This enhancement removes that limit, ensuring that you can see the full set of matching sessions. You can also see the total count of search results. In addition, overall session search performance is faster even for longer lookbacks.
- Enhanced tag search and filtering
- Filtering using tags is now easier than ever. You can now search for sessions using both indexed and unindexed tags. The filter widget auto-populates both indexed and unindexed tag names. For tags with low cardinality, the filter widget auto-populates their values as well. For tags with higher cardinality, the filter widget provides a curated list of recommended values but also gives you the ability to search for specific values. This reduces guesswork and speeds up filtering.
- Filtering by session-level attributes
- You can now filter results by attributes such as session duration, number of pages visited, max web vitals, availability of a replay, and so on to zoom in faster on the sessions you need to see.
- Comprehensive session details
- Search results show you the following details at a glance:
- Which sessions have a recording available
- Session ID, browser, OS, start time, duration
- Per-session metrics such as:
- Number of page views (including both base and virtual pages)
- Number of errors and maximum page load duration
- Maximum value for each Core Web Vitals metric (LCP, INP, CLS)
Compatibility
Upgrade your Splunk RUM agents to the latest versions for best results.
Customize columns
To customize the columns in the session list:
Select the settings icon in the top right corner of the session list.
In the pop-up pane, select the field names that you want to appear as columns in the list. Default columns appear at the top of the pane. To see non-default columns, scroll down or type into the filter box.
Sort by column
To sort the session list by a column, select that column's header. Default sort column is Session Start Time.
Search for session ID
Enter the session ID in the search box at the top of the search list, and select Go.
Filter by session attribute
To filter by a specific value or range of values of a session attribute:
At the top of the session list, select Add filter.
In the filter widget's Session Attributes section, select the attribute name, enter a value, and optionally an operator. Supported operators:
=
equal,!=
not equal,<
less than,>
greater than,[]
between,![]
not between.
Session Replay = Present
.Filter by indexed tag
To filter by an indexed tag:
At the top of the session list, select Add filter.
In the filter widget's Indexed Tags section, select a tag and a value.
The filter widget auto-populates both indexed and unindexed tag names. For tags with low cardinality, the filter widget auto-populates their values as well. For tags with higher cardinality, the filter widget provides a curated list of recommended values but also gives you the ability to search for specific values. This reduces guesswork and speeds up filtering.
Filter by unindexed tag
To filter by an unindexed tag:
At the top of the session list, select Add filter.
In the filter widget's Unindexed Tags section, select a tag and a value.
The filter widget auto-populates both indexed and unindexed tag names. For tags with low cardinality, the filter widget auto-populates their values as well. For tags with higher cardinality, the filter widget provides a curated list of recommended values but also gives you the ability to search for specific values. This reduces guesswork and speeds up filtering.