Reporting

Community Activity

Why are the reports not sending email of more than ~70 events in Suse Linux enterprise? Reports and sendemail not sending an email of more than about 70 events - The maximum number of events varies dependi... by hugohctint Loves-to-Learn Lots in Reporting 04-20-2018 0 0	0	0
Why has the Data Model Acceleration duplicated the data by 6x? What could cause DMA to have duplicate data? For example, we have a byte count field in a DMA and when we do a tstats... by simpkins1958 Contributor in Reporting 04-18-2018 0 1	0	1
how would I put a graph and list of events in one single report so currently i have this query in a report host=safemailprod source=/var/log/safemail/mailproxy.log (event="pool-e... by kiamco Path Finder in Reporting 04-17-2018 0 4	0	4
How to export a glass table in a pdf or png ? Hello, We built a glass table that we'd like to share with users that don't have access to Splunk. Doing a print scr... by pleymort Explorer in Reporting 04-17-2018 0 0	0	0
Can one generate a report with a "N/A" entry if no data found, but with real data if present I can generate an incident report by server that looks like this: Host_Name Event_Count myhost-01 1... by Gawker Path Finder in Reporting 04-16-2018 0 2	0	2
Substitution/Mapping table of user to IP address for report? I have a few web application reports and they are great, except the log data only has the user's IP address, which I ... by tjharris New Member in Reporting 04-16-2018 0 4	0	4
Why are datamodel acceleration statistics missing when acceleration is enabled? We are at version 7.0.2. On our SH's, when we enable acceleration on a Datamodel we are not seeing the acceleration ... by coreyf311 Path Finder in Reporting 04-16-2018 0 3	0	3
Splunk Data Model Acceleration stopped working Hi I have 4 data models which have been working since months. 3 of them suddenly stopped updating couple of days back... by vaibhavagg2006 Communicator in Reporting 04-13-2018 0 4	0	4
Truncated scheduled report in PDF Hi, We run scheduled report in Splunk 6.0.1 (build 189883). The PDF output is truncated. The report contains rows wit... by stwong Communicator in Reporting 04-13-2018 1 4	1	4
Detecting spam Hi All, I'm creating a dashboard where it will show if 1 email is sent to multiple recipients (spam) - same sender, ... by bryansocito New Member in Reporting 04-13-2018 0 1	0	1
How can I include an HTML in the footer when sending an email through Splunk infrastructure? I am sending an email trough splunk infrastructure, it's not related at all with Alarms. I'm just using Splunk to sen... by greggz Communicator in Reporting 04-13-2018 1 2	1	2
Anyone splunking Akamai log events? If so, what are you doing with them and/or kinds of useful searches, alerts, reports, correlations are you running ag... by maverick Splunk Employee in Reporting 04-11-2018 3 5	3	5
Splunk Scheduled PDF - Use token on mail subject Hello everyone I have a scheduled PDF delivery mail, where I want to manipulate the mail subject, using a mail token... by nuaraujo Path Finder in Reporting 04-11-2018 0 2	0	2
saved search with placeholder and run as admin Hello, Is it possible to use following syntax: \|savedsearch mysearch replace_me="value" AND having the search run as... by sylbaea Communicator in Reporting 04-10-2018 0 0	0	0
How to find a previously run search for a saved search? What would be the fix for these kinds of errors? I changed the useHistory to Auto but that did not work. Should I wai... by vrmandadi Builder in Reporting 04-10-2018 0 0	0	0
Fieldformat Command: Why does the number format display correctly in the Search App, but not in a scheduled email report? hi all, when i try to format a number in splunk, it displays correctly in the search app, but when i schedule it to b... by emafront Explorer in Reporting 04-10-2018 2 3	2	3
Why is the substitution string is not working when using the map command to execute a saved search? From the documentation "When using a saved search or a literal search, the map command supports the substitution of $... by wfrankl2 Explorer in Reporting 04-06-2018 0 6	0	6
How to put/send the result of a report in a index? How to put/send the result of a report in a index? by abhi04 Communicator in Reporting 04-05-2018 0 2	0	2
Splunk Simple XML : Post-process job export I'm getting below message while trying to export results . I'm using SimpleXML for the results you cannot export res... by koshyk Super Champion in Reporting 04-04-2018 0 3	0	3
Job not yet scheduled by server How to restrict below issue in splunk : com.splunk.SplunkException: Job not yet scheduled by server by himanshusinha1 Explorer in Reporting 04-04-2018 0 3	0	3
Unable to parse the result xml. Verify the character encoding of the results is correct. when exporting results to pdf from my dashboard the pdf file is getting generated with below error Unable to parse t... by surekhasplunk Communicator in Reporting 04-04-2018 0 1	0	1
How to calculate downtime from a script results? Hi all, I have a script that ping 10 hosts and output all of the offline hosts. This script runs every 10 minutes. ... by ngerosa Path Finder in Reporting 03-30-2018 0 0	0	0
Display panels in email as pdf I am trying to send the 3 panels I have on my dashboard as a pdf. I know they will be as one per page but how do I wr... by skamani14 New Member in Reporting 03-28-2018 0 9	0	9
Data Model Acceleration with multiple root events So after some fiddling with Data Models in Splunk 6.1.1, I created a really simple one which uses the internal indexe... by qjvtenkroode Explorer in Reporting 03-27-2018 0 5	0	5
Detection of anomaly communication in Firewall I want to find pairs of source/destination IPs, that have very high and unnormal communication in specific period. le... by reuveng New Member in Reporting 03-27-2018 0 1	0	1