Reporting

Scheduled reports run properly but do not email results as scheduled

scgolfer72
New Member

We have 4 reports (A, B, C, D) that we had scheduled to run daily and then email results to us. For a while, all 4 ran great and worked perfectly.

Then we upgraded to v8.0 and now reports A and B still run properly and work great but reports C and D run properly but do not email to us. When we run them manually we can see the line that says "This scheduled report runs daily, at 11:00. Its time range is last 24 hours. The following results were generated X hours ago." where X is the number of hours since the report ran as scheduled at 11:00.

We've tried tweaking the schedule, deleting and re-scheduling the entire report, changing from Report to Alert, nothing seems to get the email working. The report runs correctly no matter how we set it up but the emails never get sent from C and D. A and B work great and we get emails from those runs daily.

Any thoughts?

Thanks!

Labels (2)
0 Karma

bapun18
Communicator

Hi Please share the search or the sample code and also if possible please share some screenshot of the actions where you have configured the email result.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...