eg i saved one search:
host = "EDVM02BTV*" object=Process counter="% Processor Time"
| stats avg(Value) as "Avg. CPU utilization" by Host
I saved another search:
host = "EDVM02BTV*" eventtype=perfmon_windows object=Process counter="Private Bytes"
| eval MB=Value/(1024*1024)
| stats avg(MB) as "Avg. Memory Utilization in MB" by host
Both of them return visualized dashboard separately. How can I combine them into 1 reports, so I am not receiving multiple reports everyday.
Hi YanwuGuTelus,
You have to insert every search in a different panel of a the same dashboard and after schedule this dashboard to send it by mail as a report e.g. every day.
The only limitation is that, when you schedule a dashboard, you cannot receive results in csv format but only in pdf.
Bye.
Giuseppe
save the first in a dashboard, then run the second search and save as a dashboard, choose existing dashboard -. from dropdown pick the dashboard you just created -> name the panel, and you are ready.