in splunk report, can we get at least header(column name)in attached CSV in autogenerated email, if there are no data in CSV/splunk.. eg. if no data then also it should atleast show header name..
Blank CSV in splunk report
361 Views Asked by supriya At
1
There are 1 best solutions below
Related Questions in SPLUNK
- Splunk query to return events when all the objects of an array where a field value is equal to some value
- How can I reuse a subsearch in splunk?
- docker inspect splunkImage Container ID: Warining: cannot create \"/opt/splunk/var/log/splunk
- How to Perform Index Search and Join Operation in Splunk Similar to Lookup Search Logic
- How to carry Last 24 hours value in time filter from one dashboard to another dashboard in Splunk
- Splunk timechart discrepancy
- How to obfuscate/redact OpenTelemetry logs using transform/attribute processor?
- Using splunk `searchmatch`
- Match regex named group up until optional word
- Splunk Truncated Date Comparison
- urlopen error [Errno 111] Connection refused while CURL works
- Connect to Splunk from DBeaver
- splunk-otel-collector heml chart in terraform
- Splunk - Rest API - Curl - Failing with Unbalanced Quotes
- React Component for splunk dont compile with error
Related Questions in SPLUNK-QUERY
- Splunk query to return events when all the objects of an array where a field value is equal to some value
- How can I reuse a subsearch in splunk?
- How to Perform Index Search and Join Operation in Splunk Similar to Lookup Search Logic
- Splunk timechart discrepancy
- Using splunk `searchmatch`
- Splunk Truncated Date Comparison
- Ifnull not working as expected in splunk query
- How to remove some blank rows from the display of two JSON data sets comparison in Splunk?
- Splunk records join on transaction-id
- Splunk Lookup search issue
- Splunk - I am using the Security Content search "Windows MSIExec Unregister DLLRegisterServer" but unable to add any exceptions based on origin DLL
- How can I parse a tfe_log to show what modules are being used?
- what do when we get a error in Splunk eval command
- Splunk result in Table format
- How to find and display unique and missing keys between two JSON object in Splunk?
Related Questions in SPLUNK-FORMULA
- Splunk timechart discrepancy
- what do when we get a error in Splunk eval command
- Splunk Subsearch, Using value from field in primary search used to conduct a secondary search
- splunk map pass multiple values
- Why Splunk map command does not work as expected
- How to parse logger data from splunk?
- Splunk query to use counter loop on earliest and latest date range
- Input Multiple Field Values into a New Field
- How to remove empty rows from Splunk table?
- Change bar color in bar chart based on job status in Splunk Dashboard
- tranform field url_address by rempving \/ (backslash) from value
- Array in the Splunk Search
- Extract new field url_address from log body
- Splunk create Pie chart from JSON map
- Splunk Query to get comma separated value as single value
Related Questions in SPLUNK-CALCULATION
- Splunk timechart discrepancy
- what do when we get a error in Splunk eval command
- how to sum of items of array field of Splunk row
- List unique values from splunk events
- Splunk using info_min_time as timestamp instead of _raw
- Splunk query to use counter loop on earliest and latest date range
- How to find time duration between two splunk events which has unique key
- Array in the Splunk Search
- Splunk Query to get comma separated value as single value
- Splunk-Dashboard - how to add links as field in table visualization?
- How to calculate time duration between two events in splunk which dont have common element
- Enrich Splunk search data based on temporal correlation from another search
- Splunk query for showing day wise percentage
- Splunk - Displaying addcoltotals into its own column
- Splunk monthly interval time chart
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular # Hahtags
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
If there are no results, you shouldn't be getting anything sent to you in your Alert/Scheduled Report
Why would you expect to see header rows, when they only "exist" if there are rows of data?
When you run the Report manually, you'll note when there are "no results" there are, well ... "no results"
There is no header information because there is no information
Edit to address comment "there is one requirement from client that they want atleast column name if report is blank"
You need to manually create a "blank" report, then: something similar to this should work:
That should mean when you eventually
statsout your table, you'll have at least something "in every field" - which means you should always get at least one row (even if it's all dashes)