Reporting

How to include the current date and time in the email when using the sendemail command in a search?

rkanumula
Path Finder

hi,

i have to attach the current time in sendemail
Below is my search:

index=_internal| head 5|table source,sourcetype | sendemail to=abc@abc.com server=localhost subject="Report No 1 has been executed at"+""+now()  message="This is an example message" sendresults=true inline=true format=raw sendpdf=false

and also i have tried

index=_internal| head 5|table source,sourcetype | sendemail to=abc@abc.com server=localhost subject="Report No 1 has been executed at"+""+$_time$  message="This is an example message" sendresults=true inline=true format=raw sendpdf=false

but i am not getting the date in the message.

Getting Output:
Report No 1 has been executed at

Expected Output:
My Subject : Report No 1 has been executed at 27/05/2015 10.12.10 AM

Please suggest how to edit my search.

Thanks in Advance

Tags (4)
0 Karma

stephanefotso
Motivator

Hello!
Why don't you use the Email Actions dialog box to send your email? it will be simple, by using $job.earliestTime$ inthe subject field.
Thanks

SGF

manirao
Explorer

@ stephan

[November 05, 2018] [03:12:04] , this does not give AM or PM
So, either it should give AM/PM or give the value in 24 H format

Thanks in Advance

0 Karma
Get Updates on the Splunk Community!

Now Available: Cisco Talos Threat Intelligence Integrations for Splunk Security Cloud ...

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Easily Improve Agent Saturation with the Splunk Add-on for OpenTelemetry Collector

Agent Saturation What and Whys In application performance monitoring, saturation is defined as the total load ...