...he XML where I'm trying to link to the report.
<searchString> | savedsearch "Digital_Match_and_Verify" idaFullName=$username$ </searchString>
<query>
| table i...
...the chain search function for creating the tables andreports that staff with less privileges could useto access the otherwise unavailable information. But my problem is that I...
...s :
<query>| loadjob savedsearch="username:search:Domain_Controllers_Status_In_Splunk"</query>
</search>
It use work fine till last month, and now I don't see any data p...
I need to find the users that are using sourcetypes in their savedsearches (reports/dashboards). I have list of sourcetypes in csv file. SPL1:(this gives me source type list) | i...
I know this question has been asked a few times but none of the answers seem to work for me.
I have a savedsearch called usernameSearch and want to execute it synchronously using Splunk's REST A...
To reduce resource burden of scheduled searches (reports) and alerts off of the search heads, I have configured a default-mode.conf file to disable the pipeline:scheduler and created a separate job s...
...reated that savedsearch in the Splunk Searches, Reports, and Alerts interface. I have done back fills before but not since upgrading to 6.4. Is there something I am missing?
...ersions listed in the web site and also have duplicate reports being sent when scheduled. I would assume that only version of each savedsearch would be active, as they use the same stanza names in the savedsearch...
I run large searches at the start of each month. Generally I use the savedsearch commands to retrieve the results on dashboards - e.g. | savedsearchreport_name. However, we sometimes use o...
I have got ticket for a user facing the above mentioned problem for quiet some times, when user is trying tosave the savedsearchreports from settings -search & reports -search name - XXXX , h...