Reporting

Community Activity

700+ jobs running created on Jan 1, 1970 Hello, We have more than 700 jobs with status parsing on the indexer.We able to delete these jobs only after stopping... by sec_team_albara New Member in Reporting 02-25-2020 0 7	0	7
That pesky 10k limit when emailing a report I seem to be running into the 10K limit when I export via email, while manually downloading the data works just fine.... by leica0000 Engager in Reporting 02-25-2020 0 0	0	0
How to tell if accelerated data model is still rebuilding? Hello. I have a data model that has been rebuilding for close to 24 hrs. This seems plausible since it is working on ... by jamesvz84 Communicator in Reporting 02-25-2020 1 6	1	6
Data model acceleration not working HelloIm running splunk data model acceleration And it stopped working. It is stuck in skipping and nothing happensWit... by sarit_s Communicator in Reporting 02-22-2020 0 3	0	3
multireport HelloIs there any documentation about multireport ?I couldn't find any. thanks by sarit_s Communicator in Reporting 02-19-2020 0 1	0	1
Generate report for top 10 web category usage Hey guys, I'm trying to complete a report to show the top web users in my environment that are accessing websites tha... by dharveynswccd Path Finder in Reporting 02-18-2020 0 9	0	9
datamodel acceleration on multiple search heads Hello, Can you declare a datamodel acceleration on one search head and use the accelerated data from another server? ... by OL Communicator in Reporting 02-17-2020 3 3	3	3
Where does splunk log email failures It seems that Splunk is not sending the emails when the alerts are triggered. Is there any place where I can see what... by adoshi Explorer in Reporting 02-13-2020 0 8	0	8
Using a child data model to reduce search i'm trying to create a data model with child subsets and calling this in a search. However the searches are calling t... by thomala New Member in Reporting 02-12-2020 0 0	0	0
scheduled reports with zero values We have 3 search heads and they are in cluster.We are observing scheduled reports with zero values for few reports.ze... by shivanandbm Explorer in Reporting 02-12-2020 0 12	0	12
Schedule a custom search command to run for 100+ different variables We have several searches that we run and have a manual backend process to load that data to each endpoint (100+ endpo... by cdhippen Path Finder in Reporting 02-11-2020 0 6	0	6
What is the best way to ingest links from the body of emails O365 Exchange or Mimecast? I am currently ingesting O365 Exchange and Mimecast logs in to Splunk, but I would like to start ingesting any links ... by benwebsternucle Engager in Reporting 02-10-2020 0 1	0	1
how to disable the list of saved searches in savedsearches.conf? Just adding the below stanza wuld be sufficient to disable a saved search in default/savedsearches.conf disabled = 1 ... by pavanae Builder in Reporting 02-07-2020 0 2	0	2
can we get the previous results of scheduled report? Hello splunkers, I have report scheduled to run 0 minutes past every hour to generate the tabular results for last 60... by chaitanya1996 Engager in Reporting 02-07-2020 0 7	0	7
Schedule PDF Option unclickable on my Dashboards Hi I would like to schedule PDF Delivery from a Dahsboard but the link is unclickable My role role includes the sche... by erwanlebaron Engager in Reporting 02-07-2020 0 3	0	3
Splunk sendemail works but alerting doesn't with similar config Hi everyone, We are trying to configure emails sending from Splunk through our SMTP server. When i run index=test sou... by lglopes Explorer in Reporting 02-06-2020 1 6	1	6
Rest call SPL to change ownership of a saved search I know the rest api command to change the ownership of a saved search. Below is the command. I want to know correspon... by rajim Path Finder in Reporting 02-06-2020 0 3	0	3
Splunk scheduled weekly report used to take 30 mins, now takes more than 20 hrs Hello Community, We have a scheduled weekly report that used to take 30 mins, now takes more than 20 hrs to complete ... by swamysanjanaput Explorer in Reporting 02-05-2020 0 1	0	1
Splunk Dashboards 100% loaded - Generating PDF Hi We are looking to generate PDF form the results we have on a dashboard.We are using Selenium to log in and extract... by robertlynch2020 Influencer in Reporting 02-05-2020 0 0	0	0
When I clicked "view results" on alert mail, "The search you requested could not be found." message was showed in display. I set an alert that works everyday and sends mail. Today I clicekd "view results" on alert mail, then "The search you... by yutaka1005 Builder in Reporting 02-04-2020 0 7	0	7
Sendemail unexplained error: "command="sendemail", {} while sending mail to:" Hello, I've been trying to send emails automatically to receipients from search results, below my code : ... \| eval... by xZinou Explorer in Reporting 02-04-2020 0 7	0	7
ダッシュボードをPDFでエクスポートしたところ、検知結果数が１０００行以上の値が表示されないダッシュボードをPDFでエクスポートしたところ、表示検知結果数は、20000件以上あるのに対して、 PDFでは1000件までの表示しかされませんでした。これは仕様でしょうか。 by Kayoko New Member in Reporting 02-03-2020 0 2	0	2
User is not getting report A user complained that he is not getting report. He claims that he created the report in the month of December and t... by pratapa Explorer in Reporting 02-03-2020 0 8	0	8
How to combine multiple reports? Hello Splunkers, I have a scenario in which I have generated two reports - 1) First one shows data for last 6 months... by suchi01 New Member in Reporting 02-03-2020 0 4	0	4
Report statistics not getting generated at default system time. Hello Splunkers, I have a scenario where I need to generate a report for last 6 month's data. In the query I have im... by suchi01 New Member in Reporting 02-02-2020 0 3	0	3