Search code examples
reportingsplunksplunk-query

Sending out multiple reports as one email in splunk


I have 2 different independent queries and I want to send out a single email having these 2 reports as PDFs. Is there a way to achieve this in splunk.

Edit- Tried putting the reports to a dashboard and then scheduling a pdf delivery but I don't see that option. It seems like it requires some extra permissions which won't be possible for me to get :(enter image description here


Solution

  • There sure is - put both reports into a Dashboard, and schedule the Dashboard to be delivered every morning at 8a (or whenever you like).

    Adding a Report to a Dashboard as a Panel is pretty straightforward*:

    dashboard 1

    dashboard 2

    dashboard 3

    dashboard 4

    Add as many panels as you desire to the dashboard, then schedule it:

    schedule 1

    schedule 2


    Note: you do have to have appropriate permissions to schedule Reports, Dashboards, Alerts, etc - so make sure you have them in place


    * all screenshots taken with an admin account - your view may look different based on your assigned role(s)