You can schedule searches to run on a regular basis.
|Report||After you save a search as a report, you can convert that report into a scheduled report. A scheduled report is a report that runs on a scheduled interval, and which can trigger an action each time the report runs. There are two actions available for scheduled reports: Send email and Run a script.||See Schedule reports in the Reporting Manual.|
|Dashboard panel||There are several options to create a scheduled report:
||See Working with dashboard panels in the Dashboards and Visualizations manual.|
|Alert||You can create a scheduled alert to search for events on a regular schedule. You can configure scheduling, trigger conditions, and throttling to customize the alert.||See Create scheduled alerts in the Alerting Manual.|
Export search results
This documentation applies to the following versions of Splunk Cloud™: 6.6.3, 8.0.1, 7.0.11, 7.0.3, 7.0.5, 7.0.0, 7.1.3, 7.0.2, 7.0.8, 7.1.6, 7.2.3, 7.2.4, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 8.0.0