About reports
Reports are created when you save a search or a pivot for later reuse. After a report is created, there's a lot you can do with it. In this manual, you'll find out how to:
- Manually create and edit reports. Add reports to the Report listing page from either Search or Pivot. In Splunk Enterprise, configure a report manually in
savedsearches.conf
. Convert a dashboard panel to a report. Share your report with others by changing its permissions. - Accelerate slow-completing reports, either during the report creation process, or at a later point.
- Set up scheduled reports--reports that run on a regular interval and which trigger an alert action (such as the sending of an email with search results) each time they run. Scheduled reports are also used for summary indexing.
- Configure the priority of scheduled reports. Learn how the Report Scheduler manages multiple concurrent reports and learn how to configure your Report Scheduler options.
- Understand how to generate PDFs of reports, dashboards, searches, and pivots. Enable non-Latin fonts in PDFs. In Splunk Enterprise, configure PDF generation by editing .conf files. Review the exceptions to this functionality.
Create and edit reports |
This documentation applies to the following versions of Splunk Cloud Platform™: 8.2.2112, 8.2.2201, 8.2.2202, 8.2.2203, 9.0.2205, 9.0.2208, 9.0.2209, 9.0.2303, 9.0.2305, 9.1.2308, 9.1.2312, 9.2.2403, 9.2.2406 (latest FedRAMP release)
Feedback submitted, thanks!