Reporting

How to get a list of reports that trigger an email or run a script after completion?

shivamagrawa
Explorer

How can I fetch the list of reports that trigger an email or run a script after completion?

0 Karma
1 Solution

sheamus69
Communicator

Try something like:

| rest /services/saved/searches |search action.email=1|rename eai:acl.app as Application| table title updated description application action.email.to

The table fields are just suggestions - take a look at whats listed and see what you find useful.

View solution in original post

sheamus69
Communicator

Try something like:

| rest /services/saved/searches |search action.email=1|rename eai:acl.app as Application| table title updated description application action.email.to

The table fields are just suggestions - take a look at whats listed and see what you find useful.

shivamagrawa
Explorer

Thanks. working Perfect

0 Karma

somesoni2
Revered Legend

Try this

| rest /servicesNS/-/-/savedsearches splunk_server=local | search actions=* | table title author eai:acl.app search cron_schedule alert.*
Get Updates on the Splunk Community!

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...