Hello,
Not sure what's happening but I ran a watcher:
{
"trigger": {
"schedule": {
"interval": "1h"
}
},
"input": {
"none": {}
},
"condition": {
"always": {}
},
"actions": {
"email_admin": {
"email": {
"profile": "standard",
"attachments": {
"on_demand_backups.csv": {
"reporting": {
"url": "https://<redacted>.com/s/enterprise-systems/api/reporting/generate/csv_searchsource?jobParams=%28browserTimezone%3AAmerica%2FLos_Angeles%2Ccolumns%3A%21%28%27%40timestamp%27%2Crubrik.isOnDemand%2Cevent.outcome%2Chost.name%2Crubrik.objectName%2Crubrik.objectType%2Crubrik.lastUpdatedTime%2Crubrik.startTime%2Crubrik.lastSuccessfulJobTime%29%2CobjectType%3Asearch%2CsearchSource%3A%28fields%3A%21%28%28field%3A%27%40timestamp%27%2Cinclude_unmapped%3A%21t%29%2C%28field%3Arubrik.isOnDemand%2Cinclude_unmapped%3A%21t%29%2C%28field%3Aevent.outcome%2Cinclude_unmapped%3A%21t%29%2C%28field%3Ahost.name%2Cinclude_unmapped%3A%21t%29%2C%28field%3Arubrik.objectName%2Cinclude_unmapped%3A%21t%29%2C%28field%3Arubrik.objectType%2Cinclude_unmapped%3A%21t%29%2C%28field%3Arubrik.lastUpdatedTime%2Cinclude_unmapped%3A%21t%29%2C%28field%3Arubrik.startTime%2Cinclude_unmapped%3A%21t%29%2C%28field%3Arubrik.lastSuccessfulJobTime%2Cinclude_unmapped%3A%21t%29%29%2Cfilter%3A%21%28%28meta%3A%28field%3A%27%40timestamp%27%2Cindex%3A%2742f55818-fc61-40f3-8ae5-a62d70091f0a%27%2Cparams%3A%28%29%29%2Cquery%3A%28range%3A%28%27%40timestamp%27%3A%28format%3Astrict_date_optional_time%2Cgte%3Anow-24h%2Clte%3Anow%29%29%29%29%2C%28%27%24state%27%3A%28store%3AappState%29%2Cmeta%3A%28alias%3A%21n%2Cdisabled%3A%21f%2Cfield%3Aevent.module%2Cindex%3A%2742f55818-fc61-40f3-8ae5-a62d70091f0a%27%2Ckey%3Aevent.module%2Cnegate%3A%21f%2Cparams%3A%28query%3Arubrik.jobMonitoring%29%2Ctype%3Aphrase%29%2Cquery%3A%28match_phrase%3A%28event.module%3Arubrik.jobMonitoring%29%29%29%2C%28%27%24state%27%3A%28store%3AappState%29%2Cmeta%3A%28alias%3A%21n%2Cdisabled%3A%21f%2Cindex%3A%2742f55818-fc61-40f3-8ae5-a62d70091f0a%27%2Ckey%3Arubrik.isOnDemand%2Cnegate%3A%21t%2Cparams%3A%28query%3A%21f%29%2Ctype%3Aphrase%29%2Cquery%3A%28match_phrase%3A%28rubrik.isOnDemand%3A%21f%29%29%29%29%2Cindex%3A%2742f55818-fc61-40f3-8ae5-a62d70091f0a%27%2Cquery%3A%28language%3Akuery%2Cquery%3A%27%27%29%2Csort%3A%21%28%28%27%40timestamp%27%3A%28format%3Astrict_date_optional_time%2Corder%3Adesc%29%29%29%29%2Ctitle%3A%27Rubrik%20Job%20Monitoring%20Events%27%2Cversion%3A%278.15.3%27%29",
"retries": 40,
"interval": "30s",
"auth": {
"basic": {
"username": "<redacted>",
"password": "<redacted>"
}
}
}
}
},
"to": [
"<redacted>"
],
"subject": "Daily On-Demand Backups Report"
}
}
}
}
}
And it runs fine but no results are returned:
There is data for this report in Discover. There were no errors when it ran.
I am on ES/Kibana 8.15.3
I grabbed the POST Url from the share modal.