topic setting up daily formatted report in Getting Data In

setting up daily formatted report

aniketb — Thu, 26 Jul 2012 20:02:40 GMT

Hi,

I have a saved search to find out the occurrence of a keyword "Response" in a log.
I am able to create a formatted report of the same.

I would like to receive this report as an email, daily/weekly in my mailbox.
I could find option to create either a one time report or a daily alert. If I set an alert, it sends me a .csv log file. I'm actually more interested in receiving it in a report format.

Please advise me how to proceed with this.

PS: I don't have the PDF Report Server app installed.

Re: setting up daily formatted report

lguinn2 — Thu, 26 Jul 2012 20:03:54 GMT

What is your version of Splunk?

Re: setting up daily formatted report

aniketb — Thu, 26 Jul 2012 20:05:55 GMT

It is 4.3.3

Re: setting up daily formatted report

lguinn2 — Thu, 26 Jul 2012 20:05:56 GMT

You could save your search on a dashboard, and then schedule the delivery of the dashboard. I personally like this look better, but you can also save your search and have it run on a schedule.

Here is the documentation.

In Splunk 4.3, you can create a scheduled search by selecting Create->Scheduled Search and following the wizard. You can also create an alert with a criteria of "Always" alert.

Here is the documentation for alerts.

Re: setting up daily formatted report

aniketb — Thu, 26 Jul 2012 20:36:39 GMT

I don't have the PDF Report Server app installed.
Any other way?