Hi,
I have a saved search to find out the occurrence of a keyword "Response" in a log.
I am able to create a formatted report of the same.
I would like to receive this report as an email, daily/weekly in my mailbox.
I could find option to create either a one time report or a daily alert. If I set an alert, it sends me a .csv log file. I'm actually more interested in receiving it in a report format.
Please advise me how to proceed with this.
PS: I don't have the PDF Report Server app installed.
You could save your search on a dashboard, and then schedule the delivery of the dashboard. I personally like this look better, but you can also save your search and have it run on a schedule.
Here is the documentation.
In Splunk 4.3, you can create a scheduled search by selecting Create->Scheduled Search and following the wizard. You can also create an alert with a criteria of "Always" alert.
Here is the documentation for alerts.
You could save your search on a dashboard, and then schedule the delivery of the dashboard. I personally like this look better, but you can also save your search and have it run on a schedule.
Here is the documentation.
In Splunk 4.3, you can create a scheduled search by selecting Create->Scheduled Search and following the wizard. You can also create an alert with a criteria of "Always" alert.
Here is the documentation for alerts.
I don't have the PDF Report Server app installed.
Any other way?
It is 4.3.3
What is your version of Splunk?