
Scheduling searches
You can schedule searches to run on a regular basis.
Option | Description | More information |
---|---|---|
Report | After you save a search as a report, you can convert that report into a scheduled report. A scheduled report is a report that runs on a scheduled interval, and which can trigger an action each time the report runs. There are two actions available for scheduled reports: Send email and Run a script. | See Schedule reports in the Reporting Manual. |
Dashboard panel | There are several options to create a scheduled report:
|
See Working with dashboard panels in the Dashboards and Visualizations manual. |
Alert | You can create a scheduled alert to search for events on a regular schedule. You can configure scheduling, trigger conditions, and throttling to customize the alert. | See Create scheduled alerts in the Alerting Manual. |
See Also
Last modified on 24 March, 2017
PREVIOUS Saving searches |
NEXT About federated search |
This documentation applies to the following versions of Splunk Cloud Platform™: 8.2.2112, 8.2.2201, 8.2.2202, 8.2.2203, 9.0.2205, 9.0.2208, 9.0.2209 (latest FedRAMP release), 9.0.2303
Feedback submitted, thanks!