Hi,
I have several reports that are going out on various different times. Is there a way to display all the email addresses for all of the reports so we can see who gets what report?
Going thru them one by one will be painful, hoping there is a way I can retrieve this info via some sort of Splunk query.
Thank you!
@dbcase,
Try this,
| rest /services/saved/searches |search action.email=1| table title updated description eai:acl.app action.email.to
@dbcase,
Try this,
| rest /services/saved/searches |search action.email=1| table title updated description eai:acl.app action.email.to
ok thats AWSOME! THanks renjith!!!
you are welcome. Glad that it worked!