If there are no results, you shouldn’t be getting anything sent to you in your Alert/Scheduled Report
Why would you expect to see header rows, when they only "exist" if there are rows of data?
When you run the Report manually, you’ll note when there are "no results" there are, well … "no results"
There is no header information because there is no information
from User warren – Stack Overflow https://stackoverflow.com/questions/65341023/blank-csv-in-splunk-report/65344689#65344689
via IFTTT