Reporting

Community Activity

How To Accelerate a Search (issue) ? Hi, I tried turning my search into a report and accelerating it but got the " Your report doesn't qualify for accele... by egid_la Explorer in Reporting 11-03-2017 0 1	0	1
Why did my saved search display error "exited with status code: 1"? One of my saved searched exited without proper information and getting this error message in the splunkd.log. 03-20... by skuma30 New Member in Reporting 10-30-2017 0 6	0	6
Need help in getting report on exceptions I have log files where we are getting different type of error messages [10/26/17 17:29:59:635 CDT] 00030f30 SystemE... by msing34 New Member in Reporting 10-30-2017 0 3	0	3
using sendemail in a dashboard I have a dashboard that I want to send an e-mail when the search finishes. When I do the search in the search dashbo... by fk319 Builder in Reporting 10-30-2017 2 10	2	10
Error while sending email using AWS SES I have an AWS SES email service configured in Splunk using TLS enabled. When I try to test if email configuration is ... by harvisingh9 Explorer in Reporting 10-29-2017 0 3	0	3
How to get sendemail.py to work We want to include an image in the body of the email before it is sent out. However, "action.email.message.report" on... by Roozbeh59 New Member in Reporting 10-26-2017 0 1	0	1
schedule search settings for time range Hi we have created saved search with schedule type (cron every 2 mins) and time range (-2 mins earlier to now) wit... by shaganga New Member in Reporting 10-24-2017 0 1	0	1
Can all fields be outputted with outputcsv in double quotes? We are currently using the outputcsv command to generate a report for one of our support teams. Overall it works gre... by burras Communicator in Reporting 10-24-2017 1 2	1	2
Adjusting earliest/latest for both main search and sub-search Hi, I am encountering difficulty running different time range for main search and sub-search at the same time, whil... by yyossef Explorer in Reporting 10-24-2017 1 1	1	1
How to list ad-hoc/scheduled searches in order of CPU usage. I saw some CPU usage spike on my all-in-one Splunk server 6.5.x and would like to figure out which individual ad-hoc/... by danielwan Explorer in Reporting 10-24-2017 0 9	0	9
How do you schedule delivery for app that has the option grayed out? I have some Splunk apps like Cisco, Exchange, A.D, Clearpass that have the "Schedule delivery" option grayed out but ... by damode Motivator in Reporting 10-23-2017 0 8	0	8
Big duration difference between loadjob query and view results function Hi, I created a scheduled report generating millions of lines. When I list my jobs and I click on the name of sched... by JuGuSm Path Finder in Reporting 10-20-2017 0 1	0	1
Are time range pickers valid in reports? Also when running saved reports, do they run new updated data or run the same result as when saved? For clarification on second half of my question, I've had problems on running saved reports and having to adjust sett... by dannyze Explorer in Reporting 10-17-2017 0 3	0	3
Can't find my last 6 month data HI everyone, I usually run report month by month from Januari untill now (and i still have the report), and now i wa... by gijoesplunk New Member in Reporting 10-17-2017 0 8	0	8
Why won't reports with high data cardinality get much out of report acceleration? Splunk "Manage report acceleration" manual specifies the following: In addition, you can have reports that technical... by kiril123 Path Finder in Reporting 10-10-2017 0 5	0	5
Scheduled report error -- Search process did not exit cleanly, exit_code=-1, description="exited with code -1" When running the following manually there are no issues. But when this is scheduled the following error is noted and... by agreer New Member in Reporting 10-10-2017 0 3	0	3
Is the saved search called by the map command allowed to send emails/run scripts? hi, I want to send an email / run a script one time each for a bunch of ip's in a list, so I was going to iterate o... by alexl1 Path Finder in Reporting 10-09-2017 0 2	0	2
How do I stop old records being deleted? I have a set of log records dating from 2009 to 2011. I upload them to Splunk and set MAX_DAYS_AGO=10,000 as well as ... by simonsjw Engager in Reporting 10-07-2017 0 4	0	4
How can I perform a scheduled search that searches for one specific hour of each day? Need help.. Hi, I can run a search for 7 days and do eval to get data for particular hour but that seems a costly ... by prabhu77749 Explorer in Reporting 10-06-2017 0 1	0	1
Is there a way to monitor all program that are in Auto Run on Startup? I am trying to find all programs that are set to auto run upon startup but however I've tried the registry key under ... by Kitteh Path Finder in Reporting 10-05-2017 0 1	0	1
How do I export first 5 minutes of a server log? Everything I have is always sent to Splunk. We don't have any native files. I have a third party vendor that want the... by sebtardif New Member in Reporting 10-05-2017 0 2	0	2
Remove erroneous results from a search Hi, I have this data 2017-09-27 15:56:42 ID="108065999", PREMISE_FK="1004152", EVENT_TYPE="Camera Trouble", EVENT_SU... by dbcase Motivator in Reporting 09-29-2017 0 4	0	4
Access Granted/Denied query Hi, I have the following table: _time usernameOK _time usernameFail example: 2017-09-28 00:10:00 usernameOK=robE 2... by robettinger Explorer in Reporting 09-28-2017 0 3	0	3
Should accelerated reports always be scheduled? I have created an accelerated report with a summary range of 1 day. Should i also schedule this report with the cron ... by kiril123 Path Finder in Reporting 09-26-2017 0 4	0	4
Splunk Enterprise 6.6.3 Scheduled PDF Delivery For non-admins Having a user with a power role that includes schedule_search capability. And When I'm trying to schedule a dashboard... by mibrahim8 Explorer in Reporting 09-25-2017 0 2	0	2