Reporting

Scheduled Report in Verbose Mode?

Motivator

Hi,

is it possible to run a scheduled report in verbose mode? I've got some saved reports in verbose mode, when I open the cached results it's always showing fast mode.

BR

Heinz

Tags (2)
1 Solution

Splunk Employee
Splunk Employee

You can add this parameter in the search stanza in savedsearches.conf

display.page.search.mode = verbose

you can do it per search or in the default stanza for all searches.

the default is

display.page.search.mode = smart

see http://docs.splunk.com/Documentation/Splunk/6.1/Admin/savedsearchesconf

View solution in original post

Splunk Employee
Splunk Employee

You can add this parameter in the search stanza in savedsearches.conf

display.page.search.mode = verbose

you can do it per search or in the default stanza for all searches.

the default is

display.page.search.mode = smart

see http://docs.splunk.com/Documentation/Splunk/6.1/Admin/savedsearchesconf

View solution in original post

Motivator

thank you!

0 Karma

Splunk Employee
Splunk Employee

Remark : it has no effect on the execution when the scheduler runs,
It's only when you open a saved search in the UI to run it manually, that it will replace the default mode

0 Karma

Explorer

Hi yannK,

Now we have the same problem about one scheduled report, but the smart mode has no results, the verbose mode must have results.

The problem is that the scheduled report is set to verbose mode, which does not take effect. Is there any other solution?

Thanks in advance!

0 Karma

Path Finder

i have the same issue , do we have any answer to this

0 Karma

SplunkTrust
SplunkTrust

Which version of Splunk are you running on?

0 Karma

Path Finder

its 7.0.2 version

0 Karma