Splunk Dev

Generating Reports

New Member

I'd like to create a splunk report that generates only when a specific word is seen in the logs file. Right now I've created the report but it comes regardless of whether the word is seen or not. If its not seen I receive a blank report. I'd like to not receive the blank report if the word is not there.

Tags (1)
0 Karma

Splunk Employee
Splunk Employee

Double check your alert trigger conditions.

in savedsearches > advance edit, look if you have the condition "always"
that may be why your alert always send an email.

0 Karma
Get Updates on the Splunk Community!

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...

What’s New in Splunk Cloud Platform 9.1.2308?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2308! Analysts can ...