Reporting

Community Activity

Why am I only getting partial results for a summary index I have this report with this query but I am only getting partial results, it was ran once and from start of year to ... by kiamco Path Finder in Reporting 05-22-2018 0 4	0	4
How to pivot certain fields in a set of logs? I need to pivot only certain fields in a set of logs. Sample data below. Can you tell me how to go about doing this... by bschaap Path Finder in Reporting 05-15-2018 0 2	0	2
Splunk Java SDK is not working based on splunk role/index defined for the user I am using Splunk Java SDK to fetch data from Splunk index. I have the below in my splunk server. User - Customer_1... by angelinealex Communicator in Reporting 05-11-2018 0 2	0	2
How does a report behave with summary index? I have a report 'X' which is scheduled to run at a certain interval of time. According to the search query used in th... by akarivaratharaj Communicator in Reporting 05-10-2018 0 1	0	1
Why is the scheduled dashboard not returning same results when viewed manually? One of our dashboards is giving me fits and I'm not sure where to start. When viewing the dashboard within Splunk, a... by rgreer Path Finder in Reporting 05-10-2018 0 1	0	1
How to generate a daily report that shows the number of backups kicked off for each user and how many were successful and unsuccessful in a table format? I'm a total Splunk query noob here, so pardon the basic nature of my question. We have our backup logs forwarded to ... by drbruhn New Member in Reporting 05-10-2018 0 7	0	7
How to correctly setup scripted (bash script) on forwarded input (UF) in HF via CLI or configuration? Hi, I've been googling for weeks but to no avail on how to correctly setup scripted input on HF to massage input forw... by hamidseleman New Member in Reporting 05-09-2018 0 6	0	6
Aggregate related logs into single log before index My company's email system sends logs to my splunk instance, but does so in a less than ideal fashion. It sends logs ... by DEAD_BEEF Builder in Reporting 05-08-2018 0 4	0	4
pdf as a dashboard- shedule pdf delivery Hello. I currently have a dashboard in which I share multiple data, I need to send the pdf, organized, that is, the ... by isabelcarvajal New Member in Reporting 05-07-2018 0 2	0	2
use partial data from a field in reports Hi, We have a version field with 4 numbers, for instance 2018.1.0.1234 (major.minor.patch.build) One report will n... by bhartmann New Member in Reporting 05-06-2018 0 1	0	1
How to set up Splunk to pick up IDAA reports? We are currently allowing splunk to pick up our IDAA reports from our shared drive, how do I setup our mainframe jobs... by esbaam New Member in Reporting 05-05-2018 0 1	0	1
SavedSplunker - Max alive instance count=1 reached for saved search_id Hi, We are running Splunk v. 7.0.1 We are getting the following warning on our search heads "Max alive instance_cou... by mlevsh Builder in Reporting 05-04-2018 2 2	2	2
How to add the permission to allow users to change their own reports to global sharing? But at the same time not to delete knowledge object ? Hi Team, We got request from a client that he wants users in the test_basic group (role) should be allowed to change ... by Hemnaath Motivator in Reporting 05-04-2018 0 4	0	4
What are the real advantages of sending a job to the background? Greetings, I always need to perform very large jobs. I would like to know what are the real advantages of sending a ... by markuxProof Path Finder in Reporting 05-03-2018 0 4	0	4
set savedsearch schedule Hi, I am using Splunk Enterprise Version 6.6.6v. Can I set the schedule setting in seconds during savedsearch confi... by kind7776 New Member in Reporting 05-03-2018 0 7	0	7
Different timestamp format output between manual running a search and a scheduled search Hi, I have an issue with running an exactly the same search. he difference is that I first run the search based on... by apietersen Contributor in Reporting 05-01-2018 0 6	0	6
bin span behaving wierd Splunk Enterprise 6.5.2 Trying to get 12 hour span reporting Midnight to noon, noon to midnight. A simplified versi... by rk60422 Explorer in Reporting 04-30-2018 0 8	0	8
filter pivot table result I'm trying to capture my api performace by using logs created by different components in 1 particular request. My dif... by rjaimini New Member in Reporting 04-27-2018 0 0	0	0
Max time spent in per-result alerts issue I'm running into an issue with a scheduled search not completing all of it's alert actions when it executes. The sche... by mdsnmss SplunkTrust in Reporting 04-27-2018 0 1	0	1
Need to pull "Phone Home: Later than Expected" into a Dashboard report Hello all, I am trying to create a dashboard that will include the "Phone Home: Later than Expected" as a table. Cu... by bsymanow New Member in Reporting 04-26-2018 0 0	0	0
How to extract some sourcename of a report? hi, I use this report request but I would like some sourcenames to not appear in the result. Their name is: Microsof... by jip31jip31 Explorer in Reporting 04-25-2018 0 2	0	2
How to build a saved search so it aggregates data correctly week over week? I'm trying to build a saved search that aggregates data week over week on Sunday to Sunday boundaries. My search is c... by mumblingsages Path Finder in Reporting 04-24-2018 0 2	0	2
Reports and sendemail not sending email of more than 90 events Reports and sendemail not sending email of more than 70 events on sendemail the error is: External search command 's... by hugohctint Loves-to-Learn Lots in Reporting 04-23-2018 0 2	0	2
This search has encountered a fatal error and has been marked as zombied. Splunk I am running scheduled search for last 24 hours.It never completes and show status as "completed" and Job inspector s... by disha Contributor in Reporting 04-21-2018 0 3	0	3
Splunk Enterprise 7.03 Python SDK Pagination Help Good Morning, I am working with: Splunk Version 7.0.3 Splunk Build fa31da744b51 I have built my search and when I ... by pdibenedetto New Member in Reporting 04-20-2018 0 2	0	2