How to create a monthly report that emails out to a certain recipient on the 1st of each month with the previous month's data?

[AaronMoorcroft]

Hi Guys

What's the best way of creating a monthly report that emails out to a set person? It needs to run on the 1st of each month and the data shown needs to be the data from the month previous.

[lavanyaanne]

you can Schedule the Alert 1st of each month then you will get the Report.

[richgalloway · Accepted solution]

Create a scheduled search using a cron schedule similar to 0 1 1 * * which tells Splunk to run the search at 1:00 on the morning of the first day of the month. Set the start time to -1mon@mon and the finish time to @d. Tick the "Send email" box and fill in the recipient's address then save the search.

[AaronMoorcroft]

Thank you 🙂