Reporting

How to get the Patterns Tab as an emailed scheduled report?

daniel333
Builder

All,

LOVE the patterns tab. Is there a way for me to get that as an emailed scheduled search for my users?

0 Karma
1 Solution

ChrisG
Splunk Employee
Splunk Employee

Yes, you can. Just click a pattern, then click Create alert in the pattern information area on the right.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

Yes, you can. Just click a pattern, then click Create alert in the pattern information area on the right.

s2_splunk
Splunk Employee
Splunk Employee

Yup, and you can add | cluster t=0.3 labelonly=true labelfield=_patterns match=termset | findkeywords labelfield=_patterns dedup=true to any base search to identify clusters of events if you want to build your own view.

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...