Reporting

Community Activity

	How to display only one value in column? Hi,I'm trying to display only a value in one particular column, for instance represent one team for different status.... by aa0 Path Finder in Reporting 09-02-2022 0 5	0	5
	Is there any way to rename Splunk saved searches and Dashboards with rest API? Hi All , Is there any way to rename splunk saved searches and Dashboards with rest API? Best Regards by splunker2117 Loves-to-Learn Lots in Reporting 09-01-2022 0 4	0	4
	Sendmail throws SyntaxError when sending email as alert action I have an alert configured in Splunk which should send the email when the alert is triggered.The alert is being added... by vzabawski Path Finder in Reporting 09-01-2022 0 3	0	3
	How to find difference between 2 search? Hi All, I am trying to search difference between 2 search: search 1: index="xxx_prd" "/XX900/LT_TEST" this i... by yatanveersingh Engager in Reporting 08-30-2022 0 2	0	2
	Renaming reports (please add this feature!) I saw there is responses from 2013 and 2015 you cannot rename a report. Why is this still not a thing? Is there somet... by jwild91 Engager in Reporting 08-26-2022 0 2	0	2
	How can I send a schedule report without events? Hi, How can I send an empty schedule report (no events in the search)? I need to send a schedule report (daily) from... by laauespinosa Explorer in Reporting 08-25-2022 0 1	0	1
	Help with regular expression to extract fields I need to write regular expression to extract few fields in this, but not able to figure this out. Can you please hel... by vineela Path Finder in Reporting 08-25-2022 0 3	0	3
	How to pass a parameter to a report that uses federated search? Hello, I have a report that uses federated search: index="federated:xxx" filter="Value" \| rest_of_the_search I c... by Tommiee Loves-to-Learn Everything in Reporting 08-23-2022 0 0	0	0
	Use schedule report for Dashboard output? I have scheduled report which will give the result of hostname and some other details in the table format and now i n... by nivets Engager in Reporting 08-18-2022 0 10	0	10
	How to change the owner on datasets? I'm removing ex-users from Splunk. I reassigned Knowledge Objects to new users and deleted inactive accounts Now I fo... by winter New Member in Reporting 08-15-2022 0 1	0	1
	Scheduling And Reporting Quiz The question"Which of the following user roles are able to display a report in all apps?"Has no correct answer. I've ... by EnescoH New Member in Reporting 08-14-2022 0 2	0	2
	How to extract two new fields from one existing field using regex? Hello everyone, I have a field named SQL_NAME with values as per below (I'm writing two of them): #1(8):EMEMEB #2(14)... by evallja Path Finder in Reporting 08-04-2022 0 3	0	3
	How do I get a report running with cumulative stats? I run a stats command every hour to show a list of firewall rules that are getting hit in a particular way. My comm... by pbdiggins Explorer in Reporting 08-04-2022 0 4	0	4
	REST API end point to get all the saved searches I used the Splunk Enterprise Trail version to test out the APIsWhen I tried to get a particular saved search by enter... by Ragulsundaram Loves-to-Learn in Reporting 08-03-2022 0 0	0	0
	How to get sum total of two different rows set value? Hi Team, I have following data set of two fields recAccuracy and recAccuracyCount. I want to get the sum total of two... by tarunsinghtoll Engager in Reporting 08-03-2022 0 1	0	1
	Does this event id tracking clear text passwords or direct logins? Hi All, I'm working on a use case called explicit logins with of collecting eventid 4648. I'm wondering whether this ... by revanthammineni Path Finder in Reporting 08-02-2022 0 0	0	0
	How to create Reports of Memory and Diskspace? Hello, I want to have the possibility to create reports of the diskspace and/or memory from my machine. How can i se... by Germaine1989 Engager in Reporting 08-02-2022 0 3	0	3
	How caan splunk webhook fetch only 128 lines? We are working on webhook setup via Fivetran as we want to fetch data from Splunk to another platform. How can we cha... by vmisunova New Member in Reporting 07-26-2022 0 0	0	0
	WHY is sendemail to=$mail$ not working ? hello, sendemail can not work variable fields. example, index=mail \| table id domain \| eval email=id."@abc.com" ... by lifekis Explorer in Reporting 07-26-2022 0 2	0	2
	CPU monitoring multiple cores- What is the best way to report? Hoping someone can point me in the right direction. Our Splunk monitoring keeps reporting 90-100% CPU utilization how... by larryrbenson New Member in Reporting 07-22-2022 0 1	0	1
	How do I set a trigger condition on a Splunk report like you would when creating an alert? How do I set a "Trigger Condition" on a Splunk report like you would when creating an alert? My issue is that I have... by a843687 New Member in Reporting 07-21-2022 0 1	0	1
	How do I track changes to a dataset? We get a weekly ingest of a data set for our vulnerability management. Each line contains a unique value matching a v... by capilarity Path Finder in Reporting 07-21-2022 0 1	0	1
	When I send the splunk search result data via webhook I am only getting only the first row, any alternative? When I send the splunk search result data via webhook I am only getting only the first row. Is there any alternative... by deepakgarg1373 Loves-to-Learn Lots in Reporting 07-17-2022 0 3	0	3
	How to extract a specific data from log? Dear All, I am a rookie in Splunk and need your help to extract a fields from the log, Example: 2022-07-15 14:30:43 ,... by thangarun Explorer in Reporting 07-15-2022 0 7	0	7
	Looping emails for multiple events Hi there, I have created a query which returns something like this :- OrderNo CreatedBy OrderErro... by ramanjain1983 Path Finder in Reporting 07-14-2022 0 16	0	16