Other Using Splunk

Category Activity

Pass form field values to saved searches Hi I have a dynamic form that displays a chart. I was wondering if the following is possible: 1) Execute a "Sav... by sranga Path Finder in Reporting 04-20-2010 1 6	1	6
How can I control the host and root of HTML Links in Saved Search result emails? We had some issues with the way the splunk web server handled our internally signed SSL certs so we setup nginx to ha... by oreoshake Communicator in Reporting 04-15-2010 1 5	1	5
My sendemail isn't including the search results? My search command is ------ sourcetype="aix_" host="" \| sendemail to="rsimmons@splunk.com" by rsimmons Splunk Employee in Reporting 04-13-2010 3 1	3	1
Migrating Saved Search from 3.x to 4.x Hi folks Is there a way to manually migrate saved searches from splunk 3.x to 4.x? The problem is that I didn't upgr... by Simon Contributor in Reporting 04-13-2010 1 2	1	2
outputcsv: can I tell it where to create the CSV instead of /var/run/splunk? I would like to stay away from having to point to or move the file in a script. by davesplunkmonky Splunk Employee in Reporting 04-09-2010 2 1	2	1
Scheduled PDF Report Generation Error -- urlopen error [Errno 111] Connection refused Hi! I posted this in the Splunk Forums the other day but I stumbled on Answers this morning and it seems like it m... by jpdubose Explorer in Reporting 04-08-2010 1 5	1	5
Changing SERVER HEALTH ALERT emails Hi, We get many alerts sent to us about cpu health under the email heading SERVER HEALTH ALERT - followed by tags. ... by Hazel Communicator in Alerting 04-08-2010 0 4	0	4
How can I hide a saved search? I have a lot of saved searches that populate my summary index and I do not want them to be viewable in the saved sear... by Simeon Splunk Employee in Reporting 04-05-2010 5 3	5	3
Is it possible to force the results to be used in a report to be case insensitive? For example UDP and udp are shown as different items. Is it possible to force the results to be used in a report to be case insensitive? For example UDP and udp are shown ... by zliu Splunk Employee in Reporting 03-23-2010 1 1	1	1
How do we turn off alert email from source type=ps We get an alert from sourcetype=ps as a result of running this save search: (authentication failure) OR (Account * to... by Alan_Bradley Path Finder in Alerting 03-19-2010 0 1	0	1
How recent is recent? On the page 'Manager > Searches and reports,' enabled scheduled searches have a 'View Recent' link. I have 2 schedul... by hulahoop Splunk Employee in Reporting 02-05-2010 1 9	1	9
RSS feed links to a file not found page I set up an alert action to create an rss feed and there is an rss link in the table view of all of my saved searches... by benstraw Splunk Employee in Reporting 01-20-2010 2 1	2	1
Why do my email alerts have garbled headers? I am using Splunk 4 and the email alerts that are sent to me have a bunch on junk in the 'To' and 'From' lines, like:... by Johnvey Contributor in Alerting 01-14-2010 2 1	2	1