in splunk report, can we get at least header(column name)in attached CSV in autogenerated email, if there are no data in CSV/splunk.. eg. if no data then also it should atleast show header name..
Related Questions in SPLUNK
- Splunk metadata information
- Linux command outputs in splunk
- With a regular expression, match letters and numbers but not whitespaces
- break multiline events using LINE_BREAKER
- Running Python Splunk SDK Test Suite
- Incorrect Extraction of fields in Splunk
- ios crash in splunk mint
- How to search a given time range for every day in Splunk?
- Protocol(SSLV3) unsupported issue while retrieving data from Splunk
- How can you filter out direct calls to your API coming from mobile apps rather than web browsers when viewing/parsing IIS logs
Related Questions in SPLUNK-QUERY
- How do I create a Splunk query for unused event types?
- Splunk command to check if current search is greater than x% of previous search
- How to Build Splunk Search Query for below Scenario
- Finding brute force attacks with splunk
- i have 3 columns , total count , pass count , and fail count , how do i write formula in SQL or SPL if fail count is > 8% its development error
- Use sub-second precision on "earliest" in Splunk query
- How to write Splunk query to get first and last request time for each sources along with each source counts in a table output
- How to do compound query with where clause in Splunk?
- SPLUNK enterprise i am trying to calculate results where if > 4% of failure is anomaly?
- Searching for a particular kind of field in Splunk
Related Questions in SPLUNK-FORMULA
- Splunk command to check if current search is greater than x% of previous search
- Finding brute force attacks with splunk
- SPLUNK enterprise i am trying to calculate results where if > 4% of failure is anomaly?
- Splunk Subsearch, Using value from field in primary search used to conduct a secondary search
- Splunk - how to parse JSON ingested from Azure blob?
- Splunk : How can we get the combine result of cache and memory on splunk dashboard using splunk query
- Blank CSV in splunk report
- Setting up Splunk alerting
- Conditional statement on delta if there's a series of negative numbers
- Splunk Dashboard - difference between eval case and rangemap result
Related Questions in SPLUNK-CALCULATION
- Splunk command to check if current search is greater than x% of previous search
- Finding brute force attacks with splunk
- Epoch time conversion to time in Splunk
- Splunk - how to parse JSON ingested from Azure blob?
- Blank CSV in splunk report
- Conditional statement on delta if there's a series of negative numbers
- How to do cross validation and counts between two search queries using Multisearch
- How Can I Generate A Visualisation with Multiple Data Series In Splunk
- Group events by multiple fields in Splunk
- To find New error in server logs that was not present in logs in the past one week
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Popular Tags
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
If there are no results, you shouldn't be getting anything sent to you in your Alert/Scheduled Report
Why would you expect to see header rows, when they only "exist" if there are rows of data?
When you run the Report manually, you'll note when there are "no results" there are, well ... "no results"
There is no header information because there is no information
Edit to address comment "there is one requirement from client that they want atleast column name if report is blank"
You need to manually create a "blank" report, then: something similar to this should work:
That should mean when you eventually
statsout your table, you'll have at least something "in every field" - which means you should always get at least one row (even if it's all dashes)