Reporting

Community Activity

How do you set up a time range from 7 pm to 2 pm for a scheduled hourly report? We had set up a report which triggers on an hourly basis from 8PM to 2PM (earliest = -1d@d+20h & latest = @d+14h) but... by shaikhussain2 Explorer in Reporting 09-21-2018 0 2	0	2
Dynamic Anomaly detection Hi, I have Perf i.e. Performance data (OMS) where CounterName and CounterValues are present for different Computers... by ips_mandar Builder in Reporting 09-20-2018 0 3	0	3
Can I use a savedsearch (or a macro) to filter events before the first pipe? Hello, I'm trying to make my searches more efficient and I'd like to know if savedsearches (or maybe macros) can be u... by andrewtrobec Motivator in Reporting 09-20-2018 0 5	0	5
Scheduled report for AD inactive accounts Hi, I am looking for a scheduled report on AD accounts which are inactive more than 90 days. The output of the repor... by SplunkVR New Member in Reporting 09-20-2018 0 2	0	2
Is it possible to do a search as a background job and webhook to my API when it completes? Hi, I am trying to automate a Splunk search and export the result to our database. Is it possible to do a search as a... by AkhilKrishnaA New Member in Reporting 09-18-2018 0 5	0	5
Pivot not showing results even though sampling the base search does I am trying to build a Pivot using an data object derived from a Base Search. "Sampling" the search returns results... by popdeluxe New Member in Reporting 09-18-2018 0 4	0	4
How to modify the "View Results in Splunk" link from Scheduled Reports We need to change the hostname and port that the "View results in Splunk" link auto populates. Where is the proper pl... by pattokt Explorer in Reporting 09-18-2018 1 3	1	3
Why can't I get new data in my Data Model Data Set? I have created a root event dataset, for which constraint is index=abc. Here whatever there is in "index=abc" are co... by chinmayc469 Explorer in Reporting 09-18-2018 0 0	0	0
Can the Share button in reports be disabled? Hello, Can the Share button in reports can be disabled or enabled based on the role? Is there any capability for th... by chinmayc469 Explorer in Reporting 09-16-2018 1 1	1	1
Why is the following field not displaying in my report? Hello I want to display the field "chemin d’accès de l’application défaillante" in my report from the code below: i... by jip31 Motivator in Reporting 09-15-2018 0 2	0	2
Scheduled Saved Search [CRON /30 * * *] runs, but result is not refreshed Hi Splunkers, I have a few saved searches that query SQL DB via dbxquery and perform some calculations. The search... by anirbandasdeb Path Finder in Reporting 09-14-2018 0 2	0	2
Can I generate report to a shared network location Hello, Looking for suggestions on how to generate a Splunk report on a network drive. Instead of email with attachme... by uvmk61 New Member in Reporting 09-12-2018 0 2	0	2
Set the earliest time for a scheduled search to the last search time Is it possible to set the earliest time for a scheduled search to be the last time the scheduled search ran? For exam... by the0duke0 Path Finder in Reporting 09-11-2018 0 3	0	3
How do you find the number of users logged in at any specific hour? Here are two sample events Event 1 - 2018-09-10 11:17:57,982 INFO [http-nio-127.0.0.1-8085-exec-130] [BreakssFogFi... by zacksoft Contributor in Reporting 09-10-2018 0 12	0	12
How do you access SII reports directly? I've saved a few charts in SII as reports so they could be embedded in another application. I've found no direct way... by jackpal Path Finder in Reporting 09-07-2018 0 5	0	5
When to use a search macro and why am I getting an error from the following savedsearch? The index query runs from base query, and i want to append saved search to base query. The saved search is just a fil... by DataOrg Builder in Reporting 09-07-2018 0 9	0	9
How to only include data for certain hours of the day and certain days of the week for scheduled report delivery? Hello Looking at the scheduled report delivery, there is no option to exclude days in a longer time range or limit t... by andrei1bc Communicator in Reporting 09-05-2018 1 8	1	8
Can some one help me make a report from logs of my fortiweb? We have fortiweb but Splunk doesn't have any app for fortiweb. can some one help me make a report from logs of my for... by khanlarloo Explorer in Reporting 09-02-2018 0 2	0	2
Creating a List of Email Addresses and performing a search loop Pretty new to Splunk and looking for advice. I’ve tried reviewing subsearches, map and foreach looping but I just ca... by ShawnWarner7 New Member in Reporting 08-31-2018 0 1	0	1
After upgrading from Splunk 6.1 to 6.3, why am I unable to generate a PDF with error "Splunkd daemon is not responding...The read operation timed out"? I am unable to generate a pdf since I upgraded from 6.1 to 6.3. I get this message when I try to export a report to a... by ulikabbq Path Finder in Reporting 08-30-2018 3 9	3	9
How to determine a sendmail issue? I am getting an error after settign up email alerting The error I get is: 08-29-2018 15:33:19.626 +0000 ERROR Script... by tkwaller_2 Communicator in Reporting 08-29-2018 0 1	0	1
Is it possible to configure alert emails to be sent out when state changes? At the moment, we get alerts from Splunk when the state is warning/critical. These emails are sent every configured p... by mloon New Member in Reporting 08-29-2018 0 2	0	2
Referencing a saved search in simple xml not returning the most recent saved search anymore We have a simple xml dashboard that has many charts that reference saved searches that are run every night at 3am. Si... by simpkins1958 Contributor in Reporting 08-28-2018 1 4	1	4
Running mulitple reports with a certain time gap Hi everyone, I have 3 reports dependent on the outcome of each other The 1st report generates a FirstReportOutputcsv... by Chandras11 Communicator in Reporting 08-28-2018 0 4	0	4
How do I send emails to different groups based on search result contents for host field? I execute a search and, from the search results, if the host contains hostA, I want to send email to groupA. If it co... by ReachDataScient Explorer in Reporting 08-27-2018 0 1	0	1