Can we use a constant name for attachments in scheduled reports?

[kiran331]

HI

Is there a option to use a constant name for the .csv attachments for the scheduled reports?

[somesoni2 · Accepted solution]

If you're using 6.3.x or above version of Splunk, there is a property called reportFileName in the [email] stanza of the alert_actions.conf using which you can change the default email attachment names, for both pdf and csv. See this

https://docs.splunk.com/Documentation/Splunk/6.5.3/Admin/Alertactionsconf#.5Bemail.5D

reportFileName = <string>
    * Specify the name of attached pdf or csv
    * Defaults to "$name$-$time:%Y-%m-%d$"

[kiran331]

Thanks, Got it!