- Splunk Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- setting up daily formatted report
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I have a saved search to find out the occurrence of a keyword "Response" in a log.
I am able to create a formatted report of the same.
I would like to receive this report as an email, daily/weekly in my mailbox.
I could find option to create either a one time report or a daily alert. If I set an alert, it sends me a .csv log file. I'm actually more interested in receiving it in a report format.
Please advise me how to proceed with this.
PS: I don't have the PDF Report Server app installed.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You could save your search on a dashboard, and then schedule the delivery of the dashboard. I personally like this look better, but you can also save your search and have it run on a schedule.
Here is the documentation.
In Splunk 4.3, you can create a scheduled search by selecting Create->Scheduled Search and following the wizard. You can also create an alert with a criteria of "Always" alert.
Here is the documentation for alerts.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You could save your search on a dashboard, and then schedule the delivery of the dashboard. I personally like this look better, but you can also save your search and have it run on a schedule.
Here is the documentation.
In Splunk 4.3, you can create a scheduled search by selecting Create->Scheduled Search and following the wizard. You can also create an alert with a criteria of "Always" alert.
Here is the documentation for alerts.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I don't have the PDF Report Server app installed.
Any other way?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It is 4.3.3
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What is your version of Splunk?
.conf24 | Registration Open!
ICYMI - Check out the latest releases of Splunk Edge Processor
Introducing the 2024 SplunkTrust!
