Splunk Search

How to send reports to email addresses in the query results?

uagraw01
Motivator

Hello Splunkers!!

As per the below results. I want to send individual report to each manager on their email id. Likewise I have more than 50+ managers And i have to send individual reports on their individual email id. Please guide me how can I achieve this.

Managerpassfailemail
abc8020abc@gmail.com
xyz7030xyz@gmail.com
nbq6040nbq@gmail.com
0 Karma

johnhuang
Motivator
  • To send a separate email for each of the results, make sure you set "Trigger: For each result" in your alert configuration.
  • To send the email to a recipient defined by a field value in your report, you can configure the the "To:" address to $result.<field_name>$, e.g. in your case it should be $result.email$

johnhua_0-1665497694331.png

 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...