Reporting

Scheduled Report in Verbose Mode?

HeinzWaescher
Motivator

Hi,

is it possible to run a scheduled report in verbose mode? I've got some saved reports in verbose mode, when I open the cached results it's always showing fast mode.

BR

Heinz

Tags (2)
1 Solution

yannK
Splunk Employee
Splunk Employee

You can add this parameter in the search stanza in savedsearches.conf

display.page.search.mode = verbose

you can do it per search or in the default stanza for all searches.

the default is

display.page.search.mode = smart

see http://docs.splunk.com/Documentation/Splunk/6.1/Admin/savedsearchesconf

View solution in original post

yannK
Splunk Employee
Splunk Employee

You can add this parameter in the search stanza in savedsearches.conf

display.page.search.mode = verbose

you can do it per search or in the default stanza for all searches.

the default is

display.page.search.mode = smart

see http://docs.splunk.com/Documentation/Splunk/6.1/Admin/savedsearchesconf

View solution in original post

HeinzWaescher
Motivator

thank you!

0 Karma

yannK
Splunk Employee
Splunk Employee

Remark : it has no effect on the execution when the scheduler runs,
It's only when you open a saved search in the UI to run it manually, that it will replace the default mode

0 Karma

fuchengcheng
Explorer

Hi yannK,

Now we have the same problem about one scheduled report, but the smart mode has no results, the verbose mode must have results.

The problem is that the scheduled report is set to verbose mode, which does not take effect. Is there any other solution?

Thanks in advance!

0 Karma

vikashperiwal
Path Finder

i have the same issue , do we have any answer to this

0 Karma

burwell
SplunkTrust
SplunkTrust

Which version of Splunk are you running on?

0 Karma

vikashperiwal
Path Finder

its 7.0.2 version

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!