05 May 2026 11:58 AM
Hi Team,
Could you please assist us in understanding how to correlate user sessions with application logs?
We are facing a challenge where a single user may have multiple sessions, and we are considering using a Session ID for correlation. However, we are unable to locate the Session ID in the logs.
Could you suggest an appropriate approach or any alternative identifiers that can help us establish a reliable correlation between user sessions and their corresponding logs?
Please find the attached snapshot for your reference.
Thanks in advance for your support.
08 May 2026 12:37 PM
I think it is not possible to directly correlate RUM Classic monitoring data with log monitoring data. You can use USQL to determine the different session ids for a specific user based on the user tag.
SELECT userId, userSessionId FROM usersession
Maybe the better option would be to use the New RUM Experience. With DQL it is possible to query RUM events + user session and logs.
The session id is available via field dt.rum.session.id (see semantic dictionary ). The user tag is available via field user.identifier, but it is a sensitive field and therefore specified on this page.
Featured Posts