Reporting

Community Activity

Trigger and send mail after 15th occurrence based on threshold breach Hi, My requirement is : I have create real time schedule which will run for every 2 mins (cron schedule) based on the... by prsubramanian New Member in Reporting 10-13-2019 0 1	0	1
Updated: Scheduled report runs slower each time (time creep) despite acceleration - command.stats.execute_output.merge_stats duration steadily increasing I have a scheduled report that runs at minute 05 for events seen in the last hour on the hour (one full hour of data)... by orion44 Communicator in Reporting 10-11-2019 0 8	0	8
Can anyone help me with my sizing and performance considerations? Hello! I have a small distributed deployment consisting of 2 search heads (16 cores each) and 2 indexers (24 cores e... by andrewtrobec Motivator in Reporting 10-11-2019 0 2	0	2
Datamodels getting rebuild after after attaching it to new Search Head. Hello, We are trying to move from Single node installation to multinode/Distributed Search Installation(1SH and 2 In... by AKG1_old1 Builder in Reporting 10-10-2019 0 2	0	2
How to stop datamodels from rebuilding on a new Distributed search Hi We broken up a single install [SH + Indexer]. We have created a new SH and added the original Indexer(Full of dat... by robertlynch2020 Influencer in Reporting 10-09-2019 1 2	1	2
sendemail via SMTP relay server Hi, I'm trying to send emails via a SMTP relay server (alias "smart host" or "smarthost" [2]). No authentication is ... by frank_buettner Explorer in Reporting 10-08-2019 0 6	0	6
Is it possible to pass a parameter to a report via the URL? I'd like to have users be able to run a report from a URL but be able to pass a parameter to that report via the URL... by nick405060 Motivator in Reporting 10-08-2019 0 1	0	1
How to schedule a summary index where the base search look back time is greater than the scheduled report time and not create duplicates? Hi I have a data source that does not roll in on a consistent near-real-time schedule. I need to send the events to ... by Glasses Builder in Reporting 10-07-2019 0 1	0	1
How do I Delete, Edit, or Rename a search True newbie question: After creating my first search string and saving the search, I wanted to edit it. Finding no ... by jakesalomon Engager in Reporting 10-06-2019 1 5	1	5
Create Alert for Failed Scheduled Saved Search I need to create an alert for failed scheduled saved searches. If any scheduled saved searches fails to run due to sc... by rajim Path Finder in Reporting 10-04-2019 0 11	0	11
Schedule report with variable field First and foremost: maybe what I'm looking for isn't possible or I'm going down the wrong road, in which case, please... by splunkuzleuven Loves-to-Learn Lots in Reporting 10-04-2019 0 1	0	1
help for catching a field in order to use it in an loadjob command Hi In the saved search below, I retrieve the field "SITE" because I use a dropdown list in my dashboard in order to ... by jip31 Motivator in Reporting 10-01-2019 0 7	0	7
How to create a report for VPN user sessions including username, source ip, date and time for sonic wall firewall We have a customer who had CISCO firewall but got it replaced by Sonicwall, now the VPN user session reports are not ... by RK_sp1unk New Member in Reporting 10-01-2019 0 8	0	8
Why is the tstats summaries not returning child's fields only? Hi, I'm new to Datamodel then perhaps my 2 questions are basics I checked google and docs but wasn't able to find an... by cabrini77 Engager in Reporting 09-30-2019 2 3	2	3
Regex question/request Is it possible to use regex to extract values in events that always end with .PDF ? I have got a chain of events, som... by Mike6960 Path Finder in Reporting 09-30-2019 0 6	0	6
Cannot open the Edit Schedule dialog I'm using Splunk enterprise and when I go to the Reports tab and click on the report I want to schedule, I don't see ... by diegosarmiento New Member in Reporting 09-26-2019 0 4	0	4
running a Saved Search from the Command Line Interface (CLI) How do I run a Saved Search from the CLI whose name has spaces in it? When I run a Saved Search whose name does NOT... by seanlon11 Path Finder in Reporting 09-26-2019 4 6	4	6
Security Best Practices and the default Search & Reporting App Noob here. I thought I read somewhere that you should not give users access to the default Search and Reporting App... by kwkkarl New Member in Reporting 09-25-2019 0 3	0	3
How to get the entire Splunk Table to fit in one page when exporting to PDF I created a table in splunk that has 14 columns. When i export this table to a pdf, adobe only includes about 7 colu... by steeldol Explorer in Reporting 09-23-2019 3 1	3	1
How to run a report and write results only once in a scheduled time window ? Hi All, I have a report that should run for example between the time period 8.00 pm to 10.00 pm with a frequency of ... by vinaybandaru Path Finder in Reporting 09-20-2019 0 2	0	2
Configuration for Splunk for Excel Export ap After installed the Splunk for Excel Export add-on and restarted Splunk I can't see any integration on my apps. To s... by Cris Explorer in Reporting 09-18-2019 1 4	1	4
High Volume in my Reports Hi All, I am new to Splunk. I have a problem. In my project, we are extracting csv files from database with the help... by cs0602 New Member in Reporting 09-18-2019 0 0	0	0
Column moves left when I export dashboard to Pdf Because of the dashboard has too many units, I have changed 600 to 1400 in pdfgen_chart.py.but when I export Pdf, the... by duyuzhuo Explorer in Reporting 09-17-2019 1 2	1	2
How to change the background color of a report? I just tried to change background color of a report that displays a chart using the method described as above and it ... by jtsetsos Engager in Reporting 09-16-2019 1 0	1	0
Splunk complains about "Data Durability" and "Data Searcheable" but I cannot identify the reason Hi, I have been through the monitoring console, the logs and tried the health report. Still no clue. The only thing I... by afx Contributor in Reporting 09-16-2019 2 2	2	2