topic Re: Include date on a Splunk report in Reporting

Include date on a Splunk report

butzowj — Thu, 24 Mar 2016 14:45:12 GMT

Hello Splunkers -

I'd like to include the time/date range of a search in my report. If I have a report that runs at midnight showing all the results for yesterday, I'd like to be able to see the actual date on the report, not just the word "yesterday".

Is there any way this can be done?

Thanks.

Re: Include date on a Splunk report

woodcock — Thu, 24 Mar 2016 15:54:32 GMT

Yes, you can use now like this:

... | eval runDate=now()

Then you can reference it with $results.runDate$ .