Reporting

How to get the Patterns Tab as an emailed scheduled report?

daniel333
Builder

All,

LOVE the patterns tab. Is there a way for me to get that as an emailed scheduled search for my users?

0 Karma
1 Solution

ChrisG
Splunk Employee
Splunk Employee

Yes, you can. Just click a pattern, then click Create alert in the pattern information area on the right.

View solution in original post

ChrisG
Splunk Employee
Splunk Employee

Yes, you can. Just click a pattern, then click Create alert in the pattern information area on the right.

s2_splunk
Splunk Employee
Splunk Employee

Yup, and you can add | cluster t=0.3 labelonly=true labelfield=_patterns match=termset | findkeywords labelfield=_patterns dedup=true to any base search to identify clusters of events if you want to build your own view.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...