Reporting

How to monitor if daily scheduled searches/reports ran or failed?

Glasses
Builder

I thought I would post this, hopefully I won't recreate the wheel if something cool already exists...

I have a number of scheduled search /reports that I created for users, like 100 of them.  I am constantly asked "why did my report not show up in my email, today like normal?"...

I handled this by adding myself to the recipient list so I can monitor results and if the report ran.  However as you can imaging I am getting overwhelmed by the quantity of reports to keep track of.

Ideally I would like a dashboard or a single report that would list all the reports and whether they ran or failed.

 

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...