Getting Data In

How to create a consolidated report?

sai1234
New Member

I have 5 input CSV files received everyday. How can they be appended and stored everyday as one report when received? On any particular day, I want to have the details extracted from the 5 CSV input files, consolidate them in one report, and send this out in an email. How do I achieve this?

Thanks in advance!

0 Karma

sundareshr
Legend

Something like this may work.

| inputlookup file1.csv | append [| inputlookup file2.csv] | append | inputlookup file3.csv] and so on | commands to generate your report

Once you have the right report, you can schedule it to run automatically
http://docs.splunk.com/Documentation/Splunk/6.4.2/Report/Schedulereports

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...