<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: repopulate a csv with data from a search using curl in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Repopulate-a-CSV-with-data-from-a-search-using-curl/m-p/486936#M86156</link>
    <description>&lt;P&gt;You can write a saved search in Splunk and schedule it. Use outputcsv command to write results to a csv file and this csv file will be created in $SPLUNK_HOME/var/run/splunk/csv.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;you search&amp;gt; | outputcsv create_empty=false MyTestCsvFile.csv
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Note that for clustered search heads csv file is created where saved is ran and is not replicated to other search heads.&lt;/P&gt;</description>
    <pubDate>Mon, 09 Mar 2020 04:51:45 GMT</pubDate>
    <dc:creator>manjunathmeti</dc:creator>
    <dc:date>2020-03-09T04:51:45Z</dc:date>
    <item>
      <title>Repopulate a CSV with data from a search using curl</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Repopulate-a-CSV-with-data-from-a-search-using-curl/m-p/486935#M86155</link>
      <description>&lt;P&gt;Hi, what is the best way to repopulate a csv with data from a search using curl but without using a username and password as I want to cron the search? Thanks&lt;/P&gt;</description>
      <pubDate>Tue, 23 Jun 2020 19:11:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Repopulate-a-CSV-with-data-from-a-search-using-curl/m-p/486935#M86155</guid>
      <dc:creator>joe06031990</dc:creator>
      <dc:date>2020-06-23T19:11:04Z</dc:date>
    </item>
    <item>
      <title>Re: repopulate a csv with data from a search using curl</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Repopulate-a-CSV-with-data-from-a-search-using-curl/m-p/486936#M86156</link>
      <description>&lt;P&gt;You can write a saved search in Splunk and schedule it. Use outputcsv command to write results to a csv file and this csv file will be created in $SPLUNK_HOME/var/run/splunk/csv.&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;&amp;lt;you search&amp;gt; | outputcsv create_empty=false MyTestCsvFile.csv
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Note that for clustered search heads csv file is created where saved is ran and is not replicated to other search heads.&lt;/P&gt;</description>
      <pubDate>Mon, 09 Mar 2020 04:51:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Repopulate-a-CSV-with-data-from-a-search-using-curl/m-p/486936#M86156</guid>
      <dc:creator>manjunathmeti</dc:creator>
      <dc:date>2020-03-09T04:51:45Z</dc:date>
    </item>
    <item>
      <title>Re: repopulate a csv with data from a search using curl</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Repopulate-a-CSV-with-data-from-a-search-using-curl/m-p/486937#M86157</link>
      <description>&lt;P&gt;manjunathmeti Thanks&lt;/P&gt;</description>
      <pubDate>Mon, 09 Mar 2020 20:12:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Repopulate-a-CSV-with-data-from-a-search-using-curl/m-p/486937#M86157</guid>
      <dc:creator>joe06031990</dc:creator>
      <dc:date>2020-03-09T20:12:40Z</dc:date>
    </item>
  </channel>
</rss>

