Reporting

Multiple Charts, One Report

rackersmt
Explorer

Is is possible to create a single scheduled report with multiple graphs? For executive-level reporting purposes, I'd like to receive a regular report containing four separate graphs: top attackers (internal), top attackers (external), top attacked hosts (internal), top attacks. Is it possible to wrap all this up into one report?

Thanks!

Tags (2)

jtrucks
Splunk Employee
Splunk Employee

You could do this with sub searches to generate all the various charts you want. Don't use appendcols as that merges them into the same table.

It would look something like:

search stuff here [search other things there]

I'm not sure how many you can nest without using a pipe or how many you can nest within themselves, but experiment with these options to get what you need.

OR just create a dashboard for them.

--
Jesse Trucks
Minister of Magic
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...