Reporting

Community Activity

User Accounts Activity Report in the multiples machines/Applications/Registry Hi, I wrote code for " User Account Activity Report " as below. However the result is showing only for accessing/e... by brpsingara Explorer in Reporting 03-14-2019 0 1	0	1
User Activity Report? It is not Splunk console user activity report. I created a report as like below for every 4 hours. But the problem is, Splunk does not sending the scheduled reports... by brpsingara Explorer in Reporting 03-12-2019 0 5	0	5
How to send search report to gmail for every hour? HI All, How to send a search report to Gmail for every hour? Following is search query, ..\| stats count(eval(Colo... by uppukumar Explorer in Reporting 03-11-2019 0 1	0	1
how can i count instances of specific value across more than one source? my system executes unique tasks that produce 2 logs - a summary and a raw log. the source naming is something like:... by kelvinmarr New Member in Reporting 03-10-2019 0 5	0	5
Distinct values only in pivot? Why sometimes only distinct values are available in the pivot field settings? How to get all values in this case? by njandieri Explorer in Reporting 03-09-2019 0 0	0	0
How do you customize the look of a scheduled report? Is it possible to customize the look of scheduled reports? I was looking to add a logo/background to customize a repo... by aohls Contributor in Reporting 03-08-2019 0 1	0	1
Encountering a problem in sending email using splunk I have to send an email based on results and my company email doesn't receive the email that I was sending using splu... by marjonhtuazon Explorer in Reporting 03-08-2019 0 2	0	2
Collect attachments in email as input. I have an application that is able to output data via attachments in email. I am interested in collecting the data... by JWBailey Communicator in Reporting 03-08-2019 0 4	0	4
how to find response time of end to end requests from logs? {"line":"10.198.125.217 - - [08/Mar/2019:06:07:17 +0000] \"POST /install/Instere/inser/form HTTP/1.1\" 200 485312","s... by varshna New Member in Reporting 03-08-2019 0 1	0	1
If statement wild card Hi All, we need to define internal and external email segregation, we have the field sender and receiver fields . If... by sumitkathpal292 New Member in Reporting 03-07-2019 0 5	0	5
Can this Report be improved - and the Month shown on the x axis At this time if i run this over 4 months the x axis shows Month, day - all i want to see is month. And can this sear... by Skins Path Finder in Reporting 03-07-2019 0 0	0	0
How do you get a list of unique users for the month? A beginner here trying to learn SPLUNK... I have some daily log files where users can login and out multiple times ... by Adam_Marx Explorer in Reporting 03-06-2019 0 8	0	8
How do I combine 5 searches into a single report to execute a loadjob command from my dashboard? hello, In my dashboard, i use 5 different values from the search below: index="windows" sourcetype="wineventlog:App... by jip31 Motivator in Reporting 03-01-2019 1 3	1	3
Need workaround- Loadjob does not work on ad hoc searches in search cluster We currently use a single search head with an index cluster. I have written a large number of relatively complex dash... by Tedesco1 Path Finder in Reporting 03-01-2019 0 4	0	4
How to get Capacity planning and Availability report in Splunk for servers? How to get Capacity planning and Availability report in Splunk for servers? I wish to get reports on Servers Availa... by ansif Motivator in Reporting 03-01-2019 0 9	0	9
How to count the last event if the last event =Open I want to create a report which shows me the count of events if the first Event action = Open Event Action ... by rhondapace New Member in Reporting 03-01-2019 0 3	0	3
Combined Pivots Guys and girls, once again I need your help  I am trying to run a query from a "flattened" set of events (KV Store... by robettinger Explorer in Reporting 03-01-2019 0 0	0	0
What's the best datamodel to audit processes ran by users? and filesystem changes? Hello Again, I'm developing a compliance app (CIM, with tstats), now is the turn to write a search to monitor process... by 3DGjos Communicator in Reporting 02-26-2019 0 2	0	2
Can i subscribe to reports to send an email Can i do a subscription setup on splunk so that i can get an email with csv file attached of the report.. by jiaqya Builder in Reporting 02-25-2019 0 6	0	6
How to show raw data in reports? Hi, I index processed data into Splunk and my client might need to view the raw data file that is used to produce ev... by sdaruna Explorer in Reporting 02-22-2019 0 3	0	3
Accelerated data model with higher event count than corresponding indexed data Has anyone seen an issue where an accelerated data model has duplicate events in tsidx files? Occasionally I encounte... by camillak Path Finder in Reporting 02-22-2019 1 0	1	0
Find a host that is reporting to one index, but not another. I am attempting the following: Find hosts that are logging to one index but not the other by the host field. Use ca... by lhanich1 Path Finder in Reporting 02-21-2019 0 4	0	4
Search for different logs lines from the same index and source types Hi all, I have created two different search as below : index="nbtktfed44971" sourcetype="nbtktfed" "-I" "-c" "-l"... by clementros Path Finder in Reporting 02-21-2019 0 5	0	5
email from specific domain I want to exlude specific domains from both sender and receipient. for example I have abc.com domain and have one lo... by rashid47010 Communicator in Reporting 02-21-2019 0 3	0	3
Splunk Challenge - Dropdown option for each feed We have built social media sentiment analysis app in splunk, now we need to train our machine learning dataset for pr... by aravindp Explorer in Reporting 02-18-2019 0 1	0	1