topic Re: save search results as CSV with specific name in Getting Data In

save search results as CSV with specific name

Laya123 — Thu, 06 Aug 2015 16:24:44 GMT

Hi,

Is it possible to save search results with specific name and save that csv in my own directory means I want to save that csv file in another server not in the $SPLUNK_HOME/var/run/splunk

Example:

... | outputcsv abc - instead of this can I save my file like abc1 for firstday and for second day if i run the same query is it possible to change 1 to 2 (abc2), next day +1 to previous day means abc3.

Thanks in advance

Re: save search results as CSV with specific name

somesoni2 — Thu, 06 Aug 2015 16:39:42 GMT

The renaming of the export file can be done via subsearch based on current day OR any other suitable logic. But sending the exported file to some other directory is not possible via Search Interface. You'd need other means to get the data to custom directory. See some options here

http://docs.splunk.com/Documentation/Splunk/6.2.4/Search/Exportsearchresults

Re: save search results as CSV with specific name

woodcock — Thu, 06 Aug 2015 17:04:47 GMT

Why did you add this as a comment instead of an answer (I was about to give a very similar answer)?

Re: save search results as CSV with specific name

Laya123 — Tue, 11 Aug 2015 10:38:23 GMT

Thank you so much. I will try with those options