Other Using Splunk

Category Activity

Why is an email not being sent when my alert is triggered? Hi I created an alert that is triggered correctly, but the email is not sent by Splunk log i got error [Errno 1006... by nitesh218 Engager in Alerting 04-14-2015 0 8	0	8
How to pass fields as arguments when using "Run a Script" within an alert? Hello, I have a search that provides the results I need, and now I need to use these results (windows services) as ... by agoktas Communicator in Alerting 04-10-2015 0 6	0	6
Why are scheduled searches keeping artifacts in dispatch directory for 24 hours even though retention is set to a few minutes? I keep coming across the issue where certain scheduled searches that user may set up will keep artifacts in the dispa... by GeorgeStarkey Path Finder in Reporting 04-10-2015 1 2	1	2
Configure alerts in the user interface "Message" to send email? In the main UI what is the search string to create an alert displayed in the "Messages" in the top right? I wish for... by rdowd Path Finder in Alerting 04-10-2015 0 3	0	3
Alert when sample is 2 standard deviations from moving average I am trying to develop an anomaly detector: Search data... Determine 95 percentile (or 2 std deviations from average... by jdamanpour New Member in Alerting 04-09-2015 0 1	0	1
How do I create a report that lists all servers and devices reporting to Splunk broken out by country? We need to create a report that lists all devices and servers reporting into Splunk. We want to have the report brok... by jldebell Path Finder in Reporting 04-08-2015 0 3	0	3
How to send a scheduled report from Splunk to a network device as a text file? I have to send a scheduled report from Splunk to a network device as a text file. Can some one pls help me on how to... by Navanitha Path Finder in Reporting 04-07-2015 0 1	0	1
Why is appendcols no longer working in some scheduled searches in Splunk 6.2? After upgrade to splunk 6.2 some scheduled PDF are not working ... received the below error Error in 'appendcols' com... by moataz_gaber New Member in Reporting 04-07-2015 0 1	0	1
Report Generation Hi, I have a query that should be run from 00:00 till 23:59 everyday and a report should be generated for this as so... by Navanitha Path Finder in Reporting 04-07-2015 0 2	0	2
Is there any way to create an alert based on a 1 second window? Hi splunkers, Is there any way to create an alert based on 1 second window? Thanks, by sympatiko Communicator in Alerting 04-06-2015 0 2	0	2
How do you publish a Splunk real-time report? So I have a real-time report working. I have created a new user whom I want to be able to view (and only view) the re... by nageshs Engager in Reporting 04-06-2015 0 4	0	4
Serious Limitations in Reporting Package Is it just me or is 'Reporting' not actually a report package at all? See a mail exchange I have had with support be... by stuartamurray Path Finder in Reporting 04-04-2015 5 4	5	4
Remove Chart in PDF report in Splunk 5 Hi, Using the new PDF export feature in Splunk 5, I generate a PDF report that prints multi-line results per Organiz... by asarolkar Builder in Reporting 04-03-2015 7 2	7	2
Is there any benefit of creating accelerated reports on top of other accelerated reports? I'm wondering if there is any benefit of creating accelerated reports on top of other accelerated reports? For exam... by sc0tt Builder in Reporting 04-02-2015 1 2	1	2
Why am I not always receiving emails for a scheduled alert that I can see is triggered locally in Splunk? hello all, I scheduled an alert to send me emails after every 1h as soon as the word "error" is found in the events,... by gyslainlatsa Motivator in Alerting 04-02-2015 0 5	0	5
How to add the date to a report by janderja New Member in Reporting 04-01-2015 0 2	0	2
How do I display the date in my report I am new to splunk and I am using the app search and reporting. I am trying to display the event date in my search r... by ttudor Explorer in Reporting 04-01-2015 0 10	0	10
Real-time alert conditions I observed an surprising Splunk behaviour creating a real-time alert for the following query: index="thirdlane" sou... by gtorrent Explorer in Alerting 03-31-2015 0 3	0	3
Could someone give more details on the report acceleration verify summary messaging? I turned on acceleration for the report "License Usage Data Cube" included on the the License Usage page, however whe... by bandit Motivator in Reporting 03-27-2015 0 8	0	8
Active Directory Group Membership Alerts? Using the built-in Splunk admon indexing, is there a way to monitor additions or removals to AD groups? I'm using th... by mcrawford44 Communicator in Alerting 03-27-2015 0 3	0	3
How to define a token from an event to display in the subject line of an alert email? I have 5 basic SOAP web services that get logged by splunk which have 5 different names (Example: 'DeliveryScheduleRe... by skoelpin SplunkTrust in Alerting 03-27-2015 0 13	0	13
How to troubleshoot why I am not receiving emails for some scheduled alerts and reports after upgrading to Splunk 6.2? I have my search head set up to send email alerts and reports. I am getting some alerts, but after upgrading to Splu... by hartfoml Motivator in Alerting 03-26-2015 0 7	0	7
Rest API not returning alerts I am using the REST API to create a bot to search for triggered alerts every 30 seconds or so. I created saved search... by skuller Engager in Alerting 03-26-2015 0 3	0	3
Why is my savedsearches.conf configuration not honoring the alert condition of number of events > 10? I am creating an alert and configuring it in savedsearches.conf. The condition that i am giving is not firing the ale... by shreyasathavale Communicator in Alerting 03-24-2015 0 1	0	1
How can I create line/area charts over fields other than _time using Pivot? Hi, I'm learning Splunk6 pivot features, and noticed when I choose Line Chart or Area Chart in Pivot editor, X-Axis ... by frank_zhang Path Finder in Reporting 03-23-2015 1 3	1	3