Scheduled Report in Verbose Mode?

[HeinzWaescher]

Hi,

is it possible to run a scheduled report in verbose mode? I've got some saved reports in verbose mode, when I open the cached results it's always showing fast mode.

BR

Heinz

[yannK · Accepted solution]

You can add this parameter in the search stanza in savedsearches.conf

display.page.search.mode = verbose

you can do it per search or in the default stanza for all searches.

the default is

display.page.search.mode = smart

see http://docs.splunk.com/Documentation/Splunk/6.1/Admin/savedsearchesconf

[HeinzWaescher]

thank you!

[yannK]

Remark : it has no effect on the execution when the scheduler runs,
It's only when you open a saved search in the UI to run it manually, that it will replace the default mode

[fuchengcheng]

Hi yannK,

Now we have the same problem about one scheduled report, but the smart mode has no results, the verbose mode must have results.

The problem is that the scheduled report is set to verbose mode, which does not take effect. Is there any other solution?

Thanks in advance!

[vikashperiwal]

i have the same issue , do we have any answer to this

[burwell]

Which version of Splunk are you running on?

[vikashperiwal]

its 7.0.2 version