Reporting

Multiple Charts, One Report

rackersmt
Explorer

Is is possible to create a single scheduled report with multiple graphs? For executive-level reporting purposes, I'd like to receive a regular report containing four separate graphs: top attackers (internal), top attackers (external), top attacked hosts (internal), top attacks. Is it possible to wrap all this up into one report?

Thanks!

Tags (2)

jtrucks
Splunk Employee
Splunk Employee

You could do this with sub searches to generate all the various charts you want. Don't use appendcols as that merges them into the same table.

It would look something like:

search stuff here [search other things there]

I'm not sure how many you can nest without using a pipe or how many you can nest within themselves, but experiment with these options to get what you need.

OR just create a dashboard for them.

--
Jesse Trucks
Minister of Magic
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...