In my drill down page, i have an event action called Report. when i click this Report it triggers an email for few audience with some fields of the event.
how can i save this data in splunk, using this Report as a field??
If you would like to save the fact that somebody used the workflow_action
called Report
inside of Splunk itself so that you can search what Reports
have been sent, then you would simply find the definition of Report
and add this to the end of it:
| collect index=YourNewIndex
You would like to save the fact that somebody used the workflow_action
called Report
inside of Splunk itself so that you can search what Reports
have been sent?