Reporting

Community Activity

How to find out when (What time of the of the day) KVstores is being updates in Splunk / ES? Thank u I know Saved searches depend on Kvstores & Kvstores are updates once a day. In order to synch the timing saved search... by SamHTexas Builder in Reporting 08-03-2021 0 1	0	1
How to define time range of a saved search using Python SDK I'm trying to create a saved search with following kwargs = { ... by debugger22 Engager in Reporting 07-30-2021 1 4	1	4
Trigger alert when saved search has error We have a number of saved searches (configured as alerts) that make use of custom search commands we wrote. It can ha... by BernardEAI Communicator in Reporting 07-30-2021 0 2	0	2
How can I find reports with email address. Hi ,I have a clustered environment of Slunk setup. How can I find the all reports and alerts with email address. Actu... by mbhardwaj1 Engager in Reporting 07-29-2021 0 3	0	3
report cannot be accelerated I have tried below sample search for acceleration but they are not allowed. index="_internal"\| table host sourceindex... by ips_mandar Builder in Reporting 07-24-2021 1 4	1	4
Need stats count snapshot at the beginning of every hour I have a query that finds what I need for the current time and saved it as a scheduled report. However, I also need t... by samnew4598 Explorer in Reporting 07-23-2021 0 1	0	1
Splunk 8.0.2 report acceleration broken for reports using inputlookup command in subsearches Prior to updating to Splunk Enterprise 8.0.2 scheduled accelerated reports ran extremely fast:Report ADuration: 37.16... by orion44 Communicator in Reporting 07-23-2021 0 47	0	47
The search job terminated unexpectedly while loading the database We are getting The search job terminated unexpectedly error on pannel while running the dashboard, we have checked th... by bapun18 Communicator in Reporting 07-23-2021 0 5	0	5
How can I fetch report of Splunk via Rest API Hi I create report (like below screenshot) How can I fetch this report of Splunk via Rest API ? Thanks by indeed_2000 Motivator in Reporting 07-23-2021 0 8	0	8
Why am I getting error "DispatchManager: The user 'admin" does not have sufficient search privileges" after copying custom app from Splunk 4.3 to 6.2? I copied the app from my 4.3 server to my 6.2 server and did the https://MyServer:8000/en-US/debug/refresh The app w... by hartfoml Motivator in Reporting 07-22-2021 0 2	0	2
Can't attach PDF - ssName and pdfViewID unavailable I'm trying to generate PDF reports with this search: source="/var/log/messages" host="ejabber-1" \| head 1 \| sendemai... by atayarani_impri Explorer in Reporting 07-22-2021 3 8	3	8
Unable to use 2 evals in the query on the basis of regex check. I've the following data in my tablepart1.part2.answer.localpart1-part2..part3.part4.answer.netpart11.part11-part11.an... by abhinav_aashish Explorer in Reporting 07-20-2021 0 4	0	4
remote report/alert sends email Deleted the schedule report/alert. They keep sending letters to the post office. They are not in the system. empty re... by gitingua Communicator in Reporting 07-19-2021 0 10	0	10
timechart not showing correct values Hi, I am new to splunk and am trying to build one timechart.we have the following timechart search query which is not... by nikhilpai Explorer in Reporting 07-18-2021 0 9	0	9
Counting Unique Events Over 30 Days Hello,How can I improve on my Splunk query so that only one event is counted over a 30-day span where we have 500,000... by dodge27 Loves-to-Learn Lots in Reporting 07-14-2021 0 3	0	3
Report email not delivered when adding domain to sender address I created a saved search and a trigger upon completion to send myself an email that links to the finished job. It wor... by jbmitchell Loves-to-Learn Lots in Reporting 07-14-2021 0 0	0	0
Track the intermediate forwarder that parsed my event. In our current Splunk infrastructure we have a number of UF's pushing data to a layer of Intermediate forwarders whic... by manojsecsme Explorer in Reporting 07-11-2021 0 3	0	3
Using Splunk for data science to count events between sequential stages in a Process Alright guys I hope you are ready for this question because I almost lot my mind! btw THANK YOU SO MUCH FOR ALL THE H... by cindygibbs_08 Communicator in Reporting 07-11-2021 0 2	0	2
How to count events sorting by count in a multivalue fields Hello guys I have this SPL \| stats count(events) by type process and it gives me something CORRECT like this:PR... by cindygibbs_08 Communicator in Reporting 07-10-2021 0 5	0	5
multireport vs. appendpipe Code Architecture:common code generating initial results; generate unique key for each groupingmultireport or appendp... by actionabledata Path Finder in Reporting 07-09-2021 0 1	0	1
Change report sending time logic I have a report where it counts the events for the "next weekend", this meaning the following:1.“Weekend” is consider... by AdrianMCZ Explorer in Reporting 07-09-2021 0 0	0	0
External search command sendfile returned error code 1 Hello everybody,My first case to this community as I am relatively new to Splunk detailing, would be the following:I ... by AdrianMCZ Explorer in Reporting 07-09-2021 0 3	0	3
How to match a condition based on a regex in string Hello Lovely people I have a field that contains values contatenated by the "." character and the values of this fiel... by cindygibbs_08 Communicator in Reporting 07-07-2021 0 1	0	1
I only want two field to view Hello everyone . I'm a new user in splunk and I have a problem .I have a log document that sent by anywhere and ther... by furkanern Engager in Reporting 07-05-2021 0 10	0	10
Is there a faster way to calculate percentages faster? Well Hello Gorgeous people! I have a fields that can take anywhere from 3 to 5 diferente values which are cities... t... by cindygibbs_08 Communicator in Reporting 07-02-2021 0 2	0	2