Reporting

Community Activity

Why am I getting "'savedsearch': Argument "action:email.command" is not supported by this handler" when scheduling a search? Please advise what to do if I get the below error when scheduling a search.. Encountered the following error while t... by marees123 Path Finder in Reporting 08-23-2019 0 5	0	5
Sending a CSV file extracted from SPLUNK to other UNIX SERVER Hi, I'm new with splunk and have a requirement in which we need to lookup data in SPLUNK and produced a CSV File the... by limjophilip New Member in Reporting 08-23-2019 0 2	0	2
PDF chart does not display statistics correctly I have set an alert to send me PDF of the results of my search, I want the PDF to show me statistics but The PDF alwa... by dshakespeare_sp Splunk Employee in Reporting 08-23-2019 3 4	3	4
1 pool violation reported by 1 indexer Hello Splunk support, I have a free splunk license with 500MB per day. The deployment is following: 1 indexer 2 for... by sandrac10 Engager in Reporting 08-23-2019 0 3	0	3
Datamodel does not disappear from datamodel panel from Splunk UI Hi I have created a datamodels.conf by mistakely under the search app for the accelaration but the actual datamodel ... by Inayath_khan Path Finder in Reporting 08-22-2019 0 4	0	4
Getting Max value over time in report I have a report that I'm having trouble making it do what I want it to. It essentially reports 3 values, time of fir... by tsheets13 Communicator in Reporting 08-20-2019 0 3	0	3
Error sending email Hello All, I have splunk enterprise at 7.3.1 on Windows 2012 server. I am trying to configure alerts to send email. ... by eholz1 Builder in Reporting 08-20-2019 0 1	0	1
All searches failing: ending prematurely Using version 6.5.5 I keep getting the following on all of our indexers. Search results may be incomplete: the searc... by kenoski Path Finder in Reporting 08-19-2019 0 0	0	0
email errors Hello All, I have done quite a lot of searching for an answer to this problem, so far no luck. I am trying without a... by eholz1 Builder in Reporting 08-19-2019 0 1	0	1
Settings for schedule pdf delivery for dashboards not visible to others One of my clients has scheduled a pdf delivery for a dashboard and another person is able to see the entry in schedul... by vallabhi_e New Member in Reporting 08-16-2019 0 0	0	0
receive emails from thirdpart app as event in splunk i have a server that the only way it can alert on events is to send emails to an external thirdparty app ,like splunk... by pouriajalilian1 New Member in Reporting 08-14-2019 0 5	0	5
Why do I get this message? "There are no results because the first scheduled run of the report has not completed." Hi. I have created a splunk report using a query that already runs in a dashboard. The query runs fine, but for some ... by danieltuttle New Member in Reporting 08-14-2019 0 1	0	1
Search that shows scheduled time of saved searches Hello, We have a few thousand savedsearches. Most of times that they are scheduled is at the top of the hour and its... by brdr Contributor in Reporting 08-13-2019 1 3	1	3
dashboard export Is there a way to export the splunk dashboard to another splunk instance? by makrem86 New Member in Reporting 08-08-2019 0 4	0	4
Data model hierarchy disrupting data ? Hi, I am trying to use data model as I have large dataset to accelerate dashboards I use. So I have 3 lvl hierarch... by danieldurkovic New Member in Reporting 08-06-2019 0 0	0	0
Populating Lookup using saved search Hi All, I would like to populate a lookup using savedsearches but condition being the previous entry from the lookup... by akshatj2 Path Finder in Reporting 08-04-2019 0 6	0	6
Why Splunkd stops running but the splunkd.pid file remains I have a Daily Splunk report that lets me know when it hasn't heard from a server for a while. Sometimes when I get ... by MikeBertelsen Communicator in Reporting 08-02-2019 0 5	0	5
Is it possible to escape whitespace in savedsearches? As a workaround to https://answers.splunk.com/answers/761034/slack-alert-not-sending.html, I've used a single space ... by nick405060 Motivator in Reporting 08-01-2019 0 1	0	1
How to delete an Orphaned Scheduled Searches in Cluster Environment Hi, I am planning to delete the orphan scheduled search in Splunk Clustered Search Head. is there any best way to re... by harshal_chakran Builder in Reporting 08-01-2019 0 1	0	1
Is savedsearchjobload faster then querying index? Is accessing results from a savedsearch via loadjob and timefilter faster or slower than from an index and what are l... by wfskmoney Path Finder in Reporting 07-31-2019 0 1	0	1
Can Splunk index an Outlook Inbox? Is it possible to configure Splunk to monitor an Outlook inbox? One solution I have considered is configuring the in... by rlautman Path Finder in Reporting 07-30-2019 0 4	0	4
Data Model extend Summary Range: Should I rebuild or update do nothing? Hello, everybody! I have accelerated Data Model «DA Host OS» set with 7 Days Summary Range and it works as expected:... by oshirnin Path Finder in Reporting 07-29-2019 0 2	0	2
Can I email a pdf on demand? The sendemail.py script seems to want to support the sending of pdfs, but I can't trick it into actually delivering o... by matt Splunk Employee in Reporting 07-26-2019 6 4	6	4
Do all the fields in a datamodel become index-time fields? We are looking at ES with its extensive datamodels. I wonder whether all the fields in a datamodel become index-time ... by danielbb Motivator in Reporting 07-25-2019 1 2	1	2
Why are the email alerts not being sent anymore? Alerts no longer email, however they do show up in triggered alerts. This started sometime yesterday, before that we ... by nick405060 Motivator in Reporting 07-25-2019 1 2	1	2