Alerting

There are backup mails and alerting mail coming from alerts@splunkcloud.com where all attachments are with unknown name.

raghunandan1
Engager

Hi Team,

We are using below query

 

[| inputlookup ABCD_Lookup_Blacklist.csv
| outputlookup ABCD_Lookup_Blacklist_backup.csv append=false 
| sendemail to="nandan@cumpass.com" sendresults=false sendcsv=true sendpdf=false inline=true subject="ABCD_Lookup_Blacklist_backup.csv"
| rename target as host
| eval lookup_name="ABCD_Lookup_Blacklist.csv"]

 

Now we are getting attachment of CSV file name is unknown.csv
So,  we want Attachment of CSV file name with appropriate lookup_name.

 

Please help with us

Thank you,

NANDAN

 

Labels (4)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...