- Splunk Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- setting up daily formatted report
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I have a saved search to find out the occurrence of a keyword "Response" in a log.
I am able to create a formatted report of the same.
I would like to receive this report as an email, daily/weekly in my mailbox.
I could find option to create either a one time report or a daily alert. If I set an alert, it sends me a .csv log file. I'm actually more interested in receiving it in a report format.
Please advise me how to proceed with this.
PS: I don't have the PDF Report Server app installed.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You could save your search on a dashboard, and then schedule the delivery of the dashboard. I personally like this look better, but you can also save your search and have it run on a schedule.
Here is the documentation.
In Splunk 4.3, you can create a scheduled search by selecting Create->Scheduled Search and following the wizard. You can also create an alert with a criteria of "Always" alert.
Here is the documentation for alerts.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You could save your search on a dashboard, and then schedule the delivery of the dashboard. I personally like this look better, but you can also save your search and have it run on a schedule.
Here is the documentation.
In Splunk 4.3, you can create a scheduled search by selecting Create->Scheduled Search and following the wizard. You can also create an alert with a criteria of "Always" alert.
Here is the documentation for alerts.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I don't have the PDF Report Server app installed.
Any other way?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It is 4.3.3
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What is your version of Splunk?
Detecting Remote Code Executions With the Splunk Threat Research Team
Enter the Splunk Community Dashboard Challenge for Your Chance to Win!
.conf24 | Session Scheduler is Live!!
