How to include time range picker values (month and year) as email tokens in a scheduled report?

[el_ster]

Dear experts,

I configured a report scheduled once a week. Time range picker is set to previous month. The report should be sent via email. In the email subject and body, I would like to show the name of the month and the number of the year.

How can I achieve this?

Thanks in advance for your help!
Elmar

[el_ster · Accepted solution]

I figured it out by my own. I have to use result.date_month.

Thanks anyway for your help and br,
Elmar

[HattrickNZ]

do you just put $result.date_month$ or result.date_month in the email subject and body?
os the email body would have

Date: $result.date_month$

[HattrickNZ]

tks this question helped me
need to use this to get what I want. $job.earliestTime$

[stephanefotso]

Hello. This may help: http://docs.splunk.com/Documentation/6.3.1511/latest/Alert/Emailnotification

Thanks

[el_ster]

Hi,

Thanks for your answer. Yes, the link you sent me I actually used as a starting point to get email notifications implemented. However, I would have hoped that someone can show me exactly how to extract the search time range picker value for usage as an email token.

Br,
Elmar