Reporting

Community Activity

Trend Data We have a data like below and we need to trend this based on one date and time. Date Time KPI ... by praja1983 New Member in Reporting 04-10-2017 0 7	0	7
Using saved search as a "variable" I have a somewhat complex query that I am trying to execute. Essentially what I would like to do is use a saved searc... by ajh11g Explorer in Reporting 04-10-2017 0 6	0	6
Data spliting i have a data like this ip = 10.60.11.170 , value = 46 ip = 10.60.11.168 , value = 47 ip = 10.60.11.171 , value = 4... by prathapkcsc Explorer in Reporting 04-08-2017 0 15	0	15
Change the Font Size for the PDF generated from Dashboard using Splunk 6.5.2 Dear All, I have upgraded to 6.5.2 from 6.1 recently and the font size in report is too large compared with before. ... by terenceyhleung New Member in Reporting 03-31-2017 0 1	0	1
Viewstate error messages when trying to save search Every time I try to save a search I get: Cannot find viewstate with vsid="gzklzlwi" The actual vsid changes every t... by twinspop Influencer in Reporting 03-26-2017 3 11	3	11
Schedule an alert How to schedule an alert to search for last hour data. Ex: I have to schedule Alert to search for 9:00am-10:00am data... by ankithreddy777 Contributor in Reporting 03-23-2017 0 4	0	4
Query To Identify Who Has Exported Data Hi, I wonder whether someone may be able to help me please. I've tried for a few days to find a solution online bus ... by IRHM73 Motivator in Reporting 03-23-2017 0 4	0	4
How to add a Header to PDF reports in Splunk 6.2.2? How to add a Header to PDF reports in Splunk 6.2.2? Please help. Thanks in Advance by sreelakshmi123 New Member in Reporting 03-20-2017 0 1	0	1
Is there a way i can schedule a saved search to run for every 2 weeks? I want to schedule a saved search to run on Sunday 1 AM every 2 weeks. i.e. I need a search query to run July 12,2... by adityapavan18 Contributor in Reporting 03-17-2017 0 11	0	11
Is there a way to make pivot tables look better? Hello, I've been working with statistics tables and I've noticed that they're quite ugly to look at. For example, i... by andrewtrobec Motivator in Reporting 03-14-2017 0 1	0	1
Where does the report and data model acceleration store its caching? (Hunk) We are wondering where the report and the data model acceleration stores its caching. Since we are about to give this... by ddrillic Ultra Champion in Reporting 03-06-2017 0 4	0	4
How to set scheduled search to not run at certain time and date? I have a scheduled search which runs on every 15 minutes Not I like this search not to run on every Sat/Sun for 11AM... by chandra61446 New Member in Reporting 03-05-2017 0 6	0	6
Why do I get different number of results when calling a SavedSearch in Fast, Smart, and Verbose Mode? Hi, I have an issue whereby if I call a savedsearch from another search I get different results returned when using ... by davidts Path Finder in Reporting 03-03-2017 0 3	0	3
How to configure auto_summarize.timespan for accelerated reports to increase the minimum timespan to 1 day? Hello splunk users, I have some new-by questions about accelerated reports. I have accelerated a report simply by cl... by sistemistiposta Path Finder in Reporting 03-03-2017 0 3	0	3
customer unable to delete his own report Hi, I have a customer who created a report, and he is the owner. The report has permissions of private. When he tr... by a212830 Champion in Reporting 03-02-2017 0 3	0	3
Index Windows log evtx Hi guys! I have a free Splunk server which installed on Windows 2012 and I want to index and analyze Security.evtx fi... by kalianov Path Finder in Reporting 03-02-2017 0 3	0	3
How to get text input in a dashboard to return any result including null by default when assigned to a field in a saved search? I have a dashboard with a text input that is assigned to a field in a saved search with a default * entered into it ... by snix Communicator in Reporting 02-27-2017 0 1	0	1
What is the benefit of using saved searches vs data models? Apologies if I've missed something obvious, assuming I don't use parameterized saved searches, what benefits are the... by leecj Explorer in Reporting 02-27-2017 0 3	0	3
How to create a daily report that displays the activities of Splunk native “admin” user when they make configuration changes through Splunk Web? We need to be able to create a scheduled daily report that displays the activities of Splunk native “admin” user when... by mlevsh Builder in Reporting 02-24-2017 0 10	0	10
CRON jobs for alerts Can we set an alert by a cron job for 7:32AM and 9:00AM . I tried out : 32 7,9 * * 1-5 but its sending at 7:32 and... by AdixitSplunk Path Finder in Reporting 02-23-2017 0 3	0	3
Why does running an accelerated saved search work for a large time period ("All Time") but not with smaller ones ("10h")? Hello, Here is what I am facing: I have an accelerated saved search, with All Time summary range, and Timespans 1... by TiagoTLD1 Communicator in Reporting 02-23-2017 0 1	0	1
What are the limitations of dashboard PDF reports? Hi All, Default PDF report generated from dashboard is looking very bad. Fonts are getting very small when number o... by jvishwak Path Finder in Reporting 02-21-2017 1 4	1	4
Is it possible to send dashboard PDFs to an internal SharePoint site? Hi, we have a requirement from the business team and they don't want to receive the scheduled reports in email, inste... by rajgowd1 Communicator in Reporting 02-21-2017 0 3	0	3
two searches in pivot I have index=webserver_logs and source=security_logs and can search both in a single query: index=webserver_logs \| ap... by julz0815 Explorer in Reporting 02-20-2017 0 7	0	7
Loadjob returns oldest job in job history All wonder if anyone else has had this issue with loadjob. (Splunk 6.4.4 build b53a5c14bb5e) SPLUNK loads the olde... by stanwin Contributor in Reporting 02-16-2017 0 4	0	4