Splunk Search

How to send reports to email addresses in the query results?

uagraw01
Motivator

Hello Splunkers!!

As per the below results. I want to send individual report to each manager on their email id. Likewise I have more than 50+ managers And i have to send individual reports on their individual email id. Please guide me how can I achieve this.

Managerpassfailemail
abc8020abc@gmail.com
xyz7030xyz@gmail.com
nbq6040nbq@gmail.com
0 Karma

johnhuang
Motivator
  • To send a separate email for each of the results, make sure you set "Trigger: For each result" in your alert configuration.
  • To send the email to a recipient defined by a field value in your report, you can configure the the "To:" address to $result.<field_name>$, e.g. in your case it should be $result.email$

johnhua_0-1665497694331.png

 

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...