Reporting

Community Activity

Can I tag time as scheduled maintenance to exclude events from searches? I would like to tag various time periods as "scheduled maintenance," so that my application error searches ignore eve... by jkeglovitz Explorer in Reporting 08-26-2011 3 1	3	1
How can I get Splunk to accept "internal" email addresses for scheduled reports? We have a large number of internal email addresses that use our internal domain - eg. address@domain.foo.local. These... by Glenn Builder in Reporting 08-12-2011 0 1	0	1
Splunk 4.2.2 - Logs off by several Hours Good Morning, We recently upgraded our Splunk Instance to version 4.2.2, today we noticed that several of our logs a... by A4orce84 New Member in Reporting 08-11-2011 0 3	0	3
PDF App is generating an libfontconfig error and not receiving PDF. 2011-08-09 10:28:03,029 ERROR pdfhandler:529 - FF STDERR: /opt/splunk/etc/apps/pdfserver/bin/firefox-i386/firefox-b... by rsimmons Splunk Employee in Reporting 08-09-2011 1 1	1	1
Get value out of df scripted input for reporting I am working on creating a daily historic report to track the utilization of space on my Splunk file systems. I have... by cpenkert Path Finder in Reporting 08-02-2011 0 4	0	4
Results file does not exist even though results count is non zero I have a save search that runs at 5 minute intervals and passes it's results to a perl script for additional processi... by mlf Path Finder in Reporting 07-21-2011 0 1	0	1
Unable to Export Events from Cmd line I am attempting to move data from one index to another. I've read that the way to do this is to export the events yo... by richnavis Contributor in Reporting 07-21-2011 0 2	0	2
Using Splunk for logging shopping data and generating reports Hi, We have an application return in Java that captures shopping metrics like Customer Name, Vendor, CustomerId and ... by getsplunk Engager in Reporting 07-18-2011 1 1	1	1
Cannot find user ID with id=-1 I am documenting an upgrade and get the following error messages for my saved searches: could not find user in splun... by wwhitener Communicator in Reporting 07-18-2011 0 1	0	1
User departure causes summary indexes to not schedule I have a dashboard that depends on multiple summary indexes, all of which have global permissions. The summary index... by crhyne Engager in Reporting 07-15-2011 1 1	1	1
call a savedsearch calling a macro from the CLI I have a problem with that : a macro that fills a new field [mymacro] definition = eval now_time=now() \| convert ct... by mataharry Communicator in Reporting 07-15-2011 1 3	1	3
Resolve IP Addresses Within Report Results? For example, within a simple firewall search report, I am looking for destination IP addresses coming from a certain ... by aferone Builder in Reporting 07-12-2011 3 2	3	2
403 error following saved-search link An unprivileged user following the "Link to results" for the scheduled search email globally-shared saved search on S... by grahampoulter Path Finder in Reporting 07-07-2011 3 1	3	1
How do I export the search results for multiple searches to a single CSV file? I need to run many searches and consolidate all the results. Each search looks like this .......\| stats count avg(fi... by nbharadwaj Path Finder in Reporting 06-23-2011 0 1	0	1
Scheduled time has changed to None for an existing scheduled save search Since upgrading to 4.2, changing the private permissions on my scheduled saved search to global resets the scheduled ... by Masa Splunk Employee in Reporting 06-17-2011 1 1	1	1
Search scheduling reports Is there a search that will show me what time all searches are scheduled for over a 24 hour period? Broken out by mi... by jambajuice Communicator in Reporting 06-17-2011 0 1	0	1
populate_lookup creates a gziped (.gz) file? Anyone know why the populate_lookup saved search alert action creates a compressed .gz file even if the destination f... by Lowell Super Champion in Reporting 06-16-2011 2 2	2	2
Searches and reports from Cisco Firewall Hi, I 'am a newbie with splunk and i have an issue with the Cisco Firewalls. I use the syslog feature with splunk for... by exaprobe New Member in Reporting 06-09-2011 0 1	0	1
editing a search within an app from the gui Lets say I edit an saved search within an app from the gui as user arnold. Then the search is owned by arnold in the ... by Starlette Contributor in Reporting 06-09-2011 0 3	0	3
share saved searches I've looked at this posting [http://splunk-base.splunk.com/answers/5391/share-a-saved-search-without-admin-rights] bu... by sureshchinta Explorer in Reporting 06-08-2011 0 3	0	3
Scheduled search shows event count but no events I have setup a number of scheduled searches to run using the cron setting. When I inspect these via the Jobs window I... by shanleyj Explorer in Reporting 06-07-2011 2 1	2	1
TimeRangePicker Module contains HiddenSavedSearch could not use cached saved search? as title mentioned, when TimeRangePicker Module contains HiddenSavedSearch just as follows <module>name="TimeRangePi... by hjwang Contributor in Reporting 06-02-2011 0 4	0	4
report on ssh login attempts from the foreign source ip address I have several firewall appliances logging into one syslog file and would like to report on the number of SSH login a... by gisnetsec Explorer in Reporting 05-25-2011 0 4	0	4
histogram report of purchase amount I have events that contains an amount. How do I create a histogram report that counts events grouped into these inter... by andyk Path Finder in Reporting 05-24-2011 0 1	0	1
customized emailed reports I want only 2 fields in my emails received from splunk host and logs, How can i do, kindly advice by shujaqk New Member in Reporting 05-24-2011 0 3	0	3