Reporting

pass parameter and schedule a queries

pawantiwari3987
Explorer

We have a system wherein we pass the parameter like date and we schedule the report daily or weekly. once the reports get complete it saves the output in csv format to a common location. we are trying to do the same thing in Hunk with hadoop.

however we are not able to pass parameter and schedule the report in hunk.

Please help

Tags (2)
0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

If you are able to run the report against a Virtual Index, scheduling it and passing parameters to the query should be the same as Splunk.

What is the error you are getting?

0 Karma

pawantiwari3987
Explorer

there is no option to pass parameter while scheduling/Creating a report.... Any Solution

0 Karma

rdagan_splunk
Splunk Employee
Splunk Employee

You can pass parameters to the search via a form. Here is a link to the document: http://docs.splunk.com/Documentation/Splunk/latest/Viz/FormEditor

0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Getting Started with Edge Processor, Machine Learning Toolkit ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...