Reporting

Community Activity

Splunk MINT SDK crash Hi I'm using this guide for Splunk MINT and I'm using the SAP SDK alsohttps://docs.splunk.com/Documentation/MintIOSSD... by KlausPed New Member in Reporting 12-03-2020 0 0	0	0
Eval statement that included AND and OR Hello All,I have been struggling with what seems to be a very simple concept. Can someone please help me correct this... by Mary666 Communicator in Reporting 12-02-2020 0 1	0	1
Events are Inconsistent Hello, I am having an issue where sometimes I can see events and sometimes not. An example is: I tested event 4625 wi... by gba8912 Explorer in Reporting 12-01-2020 0 0	0	0
Extract Table in Event Hi Community!I have a problem to extract a table in an XML event.The data looks like this <data type="info" text="sa... by RobertRi Communicator in Reporting 12-01-2020 0 6	0	6
Splunk Usecase HI Splunkers,I'm working on a usecase where I have to report on when plain text passwords being used. Please help me... by revanthammineni Path Finder in Reporting 11-30-2020 0 1	0	1
We can't see events older than a day in Splunk hello, We recently set up Splunk on our system so we are still learning. We have an issue where we are not getting ol... by gba8912 Explorer in Reporting 11-30-2020 0 2	0	2
newbe question about time spent Good day, I am new to Splunk and just have completed the fundamentals I course. For my first use case I am looking fo... by mpjjonker Explorer in Reporting 11-27-2020 0 7	0	7
Searching a field using another field Hi there,I want to search events for example A =B*xyWhere B is another field name with different values depending on ... by ISP8055 Path Finder in Reporting 11-26-2020 1 3	1	3
Will a new-ingested but old-dated event be accelerated in DMA? Hello, I was wondering if a new event time-generated 1 month ago but indexed today (with the correct _time, meaning "... by davietch Path Finder in Reporting 11-25-2020 0 6	0	6
How to catch=handle alert's results in another monitoring alert=rule? Hey guys,How to catch=handle alert's results in another monitoring alert=rule?There's probably a way with Alet Manage... by highsplunker Contributor in Reporting 11-22-2020 0 0	0	0
Report (Simple XML) navigation with previous selected datetime range We have created an app with Navigation and some Simple XML reports. When we go to the first report and select a datet... by raymondc Engager in Reporting 11-18-2020 0 0	0	0
How can I use REST api to get scheduled searches? I am able to get results with this: curl -k -u ${SPLUNK_USER}:${SPLUNK_PASSWORD} -X GET https://{$SPLUNK_URL}/service... by nsleden New Member in Reporting 11-09-2020 0 0	0	0
Splunk metrics and counters What is the appropriate way to calculate a sum of metric rates on counters and sum them, either for a single stat or ... by peiffer Path Finder in Reporting 11-09-2020 0 0	0	0
Sendmail times out after 1 hour Hi everyone,I have an issue when trying to generate a scheduled view and send it via email.Reading similar issues in ... by lpino Path Finder in Reporting 11-09-2020 0 0	0	0
Orphaned Search Alert still appears after reassign knowledge objects There were a few orphaned searches that were linked to a user that had left. I had reassigned these (knowledge objec... by robnewman666 Path Finder in Reporting 11-09-2020 0 0	0	0
There are no results because the first scheduled run of the report has not completed. I have a report scheduled, and the schedule successed but I have always the message:There are no results because the ... by fernandacuadrad New Member in Reporting 11-06-2020 0 0	0	0
Compare previous month total at the same day as current day HiI would like to generate a count for the current month to date (today), and compare this with the count of the prev... by BernardEAI Communicator in Reporting 11-05-2020 0 1	0	1
Is it possible to warn the users on CSV export from dashboard panel if they don’t get the full dump of data? We have dashboard with 50k events coming everyday. If a user tried to export results for last 30 days and they are no... by Mansi24 Path Finder in Reporting 11-05-2020 0 1	0	1
Any values like $name$ for sending table inline in JIRA Service Desk I have a table that I am returning from the search below: host=sre* \| search "[*._reprovision()] - [WARNING]" \| d... by bconnell New Member in Reporting 11-03-2020 0 1	0	1
Number of accelerated reports Is there a limit to how many accelerated reports you can run? I would like to run hundreds of them. I'm assuming the ... by klim Path Finder in Reporting 10-30-2020 0 1	0	1
Use a Special characters Hello,I want to use the eval search command but i have a little problem. index=* host="*" source="/applis" legs{}.... by Ant3xes Engager in Reporting 10-28-2020 0 2	0	2
Creating Incremental Summaries Using Report Acceleration Hi everyone,I am trying to accelerating one savedsearch "index=main \|stats count by type,severity". Now I want an acc... by milanparmar541 Explorer in Reporting 10-27-2020 0 0	0	0
Hide table column in inline email table Hi,I'm looking for a way to hide a table column in an inline email table while still retaining the ability to use the... by jamesdsteel Explorer in Reporting 10-26-2020 0 2	0	2
Outlook categories integration with splunk We use outlook categories while categorizing alerts received in several outlook folder of specific mailbox, as we pe... by priya0709 Path Finder in Reporting 10-23-2020 0 0	0	0
How to configure scheduled saved searches on search heads? Hi,I have a clustered environment (Search Head Cluster with 1 Forwarder, 3 SHs, and 2 Indexers).I have deployed a cu... by mbachhav Path Finder in Reporting 10-21-2020 0 3	0	3