Reporting

Dashboard Tokens and PDF Delivery help

Jarohnimo
Builder

I'm utilizing tokens on my dashboard to dynamicly generate date ranges for the header. This involved adding a panel that uses html.

It works fine to run the tokens in the header of the dashboard but the tokens don't run when the dashboard is scheduled to delivery pdf

<div id="custom_header">
<div id="custom_header_title"><h1>weekly report for analyst for week $earliest_time$ through $latest_time$</h1></div>
</div>

when the report is emailed via PDF it actually shows $earliest_time$ through $latest_time$ (ignores running the tokens)... Vs the dashboard that actually runs the tokens and showing the relative dates

I believe this maybe a limitation in splunk looking at the doc but ask for someone confirm? And if there work around?

https://docs.splunk.com/Documentation/Splunk/7.3.3/Alert/EmailNotificationTokens

Labels (1)

j0e3gan
Explorer

Correct re the limitation to my understanding unfortunately.  See an older related thread.

0 Karma
Get Updates on the Splunk Community!

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Optimizing SOC workflows with a unified, risk-based approach to Threat Detection, Investigation, and Response ...

Almost Too Eventful Assurance: Part 1

Modern IT and Network teams still struggle with too many alerts and isolating issues before they are notified. ...

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Today’s threat landscape is more complex than ever. Security operation centers (SOCs) are overwhelmed with ...