From the course: Practical Splunk: Build Data Intelligence through SPL, Reports, and Dashboards

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Creating reports

Creating reports

- Welcome back. In this lesson, we are going to take a look at reports. You're going to love it. Ad-hoc searches in Splunk are great. That's what you use when you are troubleshooting something, or when you're looking for some information. But, they can be tedious to reuse. Imagine you having to retype all the SPL that you had come up with every time when you need to troubleshoot. That's where reports come in. Searches can be saved as reports. So, you come up with a search, make sure the results are what you want, and then you simply save that search so that next time you don't have to retype the SPL. That's the whole concept behind the reports. Once created, reports can be run at any time without you having to retype the SPL or even remember the SPL that powers the report. It can be shared with others. This is one of the advantages of Splunk knowledge objects. Knowledge objects are nothing but special tools that help you enhance and explore data. Reports is one of the most common…

Contents