Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Other Using Splunk
- :
- Alerting
- :
- How to fix the formatting of a scheduled report re...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
I am receiving a schedule report via email from my dev environment and prod environment. Same report, but the email format is not the same coming from my prod env. The email from dev env has a nice format with the name of my Report ... whereas the one coming from my prod env shows the link.
It doesn't look nice and clean like the one coming from my dev. We are running 6.4.1 on both env.
Any thoughts on how to fix this?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Check if the "Include" section is different for the alert in both environmennt (most probably it is). Go you SPlunk-> You app which contains your alert -> Alerts, open the alert and under Send email action, see what all checkboxes are selected for Include.
http://docs.splunk.com/Documentation/Splunk/6.5.0/Alert/Emailnotification#Configure_email_notificati...
(see step3- Include)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Check if the "Include" section is different for the alert in both environmennt (most probably it is). Go you SPlunk-> You app which contains your alert -> Alerts, open the alert and under Send email action, see what all checkboxes are selected for Include.
http://docs.splunk.com/Documentation/Splunk/6.5.0/Alert/Emailnotification#Configure_email_notificati...
(see step3- Include)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Thanks for the input. I'm sorry that i wasn't more clear, but my issue is with a scheduled search report. Would that still apply to that as well?
Thanks!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yup... just go to Reports, instead of Alerts... The email Action is same for both.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Awesome, thanks for the help. We solved the issue.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Nice! Glad @somesoni2 was able to help! @a548506, since it sounds like this solved the problem, would you mark the answer as "accepted"?
Splunk Mobile: Your Brand-New Home Screen
Introducing Value Insights (Beta): Understand the Business Impact your organization ...
Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...
