Reporting

Scheduled Report in Verbose Mode?

HeinzWaescher
Motivator

Hi,

is it possible to run a scheduled report in verbose mode? I've got some saved reports in verbose mode, when I open the cached results it's always showing fast mode.

BR

Heinz

Tags (2)
1 Solution

yannK
Splunk Employee
Splunk Employee

You can add this parameter in the search stanza in savedsearches.conf

display.page.search.mode = verbose

you can do it per search or in the default stanza for all searches.

the default is

display.page.search.mode = smart

see http://docs.splunk.com/Documentation/Splunk/6.1/Admin/savedsearchesconf

View solution in original post

yannK
Splunk Employee
Splunk Employee

You can add this parameter in the search stanza in savedsearches.conf

display.page.search.mode = verbose

you can do it per search or in the default stanza for all searches.

the default is

display.page.search.mode = smart

see http://docs.splunk.com/Documentation/Splunk/6.1/Admin/savedsearchesconf

HeinzWaescher
Motivator

thank you!

0 Karma

yannK
Splunk Employee
Splunk Employee

Remark : it has no effect on the execution when the scheduler runs,
It's only when you open a saved search in the UI to run it manually, that it will replace the default mode

0 Karma

fuchengcheng
Explorer

Hi yannK,

Now we have the same problem about one scheduled report, but the smart mode has no results, the verbose mode must have results.

The problem is that the scheduled report is set to verbose mode, which does not take effect. Is there any other solution?

Thanks in advance!

0 Karma

vikashperiwal
Path Finder

i have the same issue , do we have any answer to this

0 Karma

burwell
SplunkTrust
SplunkTrust

Which version of Splunk are you running on?

0 Karma

vikashperiwal
Path Finder

its 7.0.2 version

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...