Generating Reports

[sbarthol]

I'd like to create a splunk report that generates only when a specific word is seen in the logs file. Right now I've created the report but it comes regardless of whether the word is seen or not. If its not seen I receive a blank report. I'd like to not receive the blank report if the word is not there.

[yannK]

Double check your alert trigger conditions.

in savedsearches > advance edit, look if you have the condition "always"
that may be why your alert always send an email.