Reporting

How to display previous month's name in the subject of a scheduled report?

loveforsplunk
Explorer

I have a report scheduled on 2nd of every month, giving the whole data of the previous month.

I would like to have it emailed with subject "Report for the month of "previous month". How do I display the previous month's name in the subject of the report automatically?

0 Karma

lguinn2
Legend

I am not sure how to include a name in the title, but there probably is a way...
However, if you are creating a scheduled dashboard, you could have a panel in your dashboard like this:

| makeresults
| eval previous_month_begin = relative_time(now(),"-1mon@mon") 
| eval "Previous Month Start" = strftime(previous_month_begin, "%B %d, %Y") 
| eval previous_month_end = relative_time(now(),"@mon-1m") 
| eval "Previous Month End" = strftime(previous_month_end, "%B %d, %Y") 
| eval heading = 'Previous Month Start' " to " 'Previous Month End'
| fields heading

which makes a beautiful heading. You might want to show it as a single value panel at the top of the dashboard.

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...