topic Re: How to display the search time range and description in a PDF report? in Splunk Search

How to display the search time range and description in a PDF report?

thambisetty — Tue, 09 Sep 2014 15:30:56 GMT

Hi,
As I am generating PDF reports, I want the description and the time range used for the search that generated the data to display on the PDF. How do I do this?

Re: How to display the search time range and description in a PDF report?

ppablo — Tue, 09 Sep 2014 21:08:07 GMT

Hi @thambisetty

Do you want to display the time range used for the search that generated the data on the PDF? or the time it took to actually generate the PDF itself?

Re: How to display the search time range and description in a PDF report?

thambisetty — Wed, 10 Sep 2014 14:20:08 GMT

I want to display the time range used for the search that generated the data and description also on the PDF

Re: How to display the search time range and description in a PDF report?

ateterine — Wed, 17 Sep 2014 18:35:56 GMT

I have the same question, @ppablo_splunk, @thambisetty, do you guys have an answer to this?
Thanks!

Re: How to display the search time range and description in a PDF report?

ppablo — Thu, 18 Sep 2014 23:51:13 GMT

Hey @ateterine

Unfortunately I don't know how to do this, but I edited the title and clarified the content so hopefully some PDF reporting experts will be more inclined to chime in 🙂

Patrick

Re: How to display the search time range and description in a PDF report?

somesoni2 — Fri, 19 Sep 2014 01:58:48 GMT

You can add a single value panel as mentioned below to get the search timeline.

<dashboard>
  <label>ShowSearchDate</label>
  <description/>
  <row>
    <panel>
      <single>
        <searchString>|gentimes start=-1 | addinfo | convert ctime(*) | eval reportDate=info_min_time." to ".info_max_time | table reportDate</searchString>
        <earliestTime>-60m@m</earliestTime>
        <latestTime>now</latestTime>
        <option name="drilldown">none</option>
        <option name="beforeLabel">Report Date:</option>
        <option name="linkView">search</option>
        <option name="afterLabel">.</option>
      </single>
    </panel>
  </row>
  <row>
    <panel>
      <chart>
        <title>Internal Sourcetype Distribution Report</title>
        <searchString>index=_internal | stats count by sourcetype</searchString>
        <earliestTime>-60m@m</earliestTime>
        <latestTime>now</latestTime>
      </chart>
    </panel>
  </row>
</dashboard>

Re: How to display the search time range and description in a PDF report?

thambisetty_bal — Thu, 29 Dec 2016 10:50:51 GMT

The above is mentioned for dashboard , what if I want to print time range in report.

Re: How to display the search time range and description in a PDF report?

TonyLeeVT — Sat, 16 Sep 2017 19:02:49 GMT

Agreed. A solution for a report would be ideal.

Re: How to display the search time range and description in a PDF report?

dharshini — Mon, 28 Jan 2019 07:01:07 GMT

Can anyone help mention the solution? Like how to display the time-range for which the search was run on a PDF report.
Thanks.