topic export raw AllTime: file not found in Reporting

export raw AllTime: file not found

kochera — Wed, 23 Jan 2013 13:59:08 GMT

Hi,

We're running Splunk 4.3.3. One of our customers would like to export the search results (approx. 300 events) over AllTime in raw-format. The UI export fails with an error message:

File not found
Firefox can't find the file at https://pspka028:7020/splunk/en-US/api/search/jobs/1358949211.44213/event?isDownload=true&timeFormat=%FT%T.%Q%:z&maxLines=0&count=500&filename=test&outputMode=raw&spl_ctrl-limit=limit&spl_ctrl-count=500.

This seems to be a known problem, I found some similar questions on splunkbase but did not find an answer. Are there any updates regarding this?

Cheers,
Andy

Re: export raw AllTime: file not found

germanjulian — Tue, 11 Jun 2013 14:47:48 GMT

same issue for us. any workaround?

4.3.4

Re: export raw AllTime: file not found

Moritz — Mon, 28 Sep 2020 15:52:49 GMT

When you extend your searchstring with
| table _raw | outputcsv output.csv
you can find you exprted results in $SPLUNK_HOME/var/run/splunk.

Re: export raw AllTime: file not found

bravon — Tue, 25 Aug 2015 09:30:51 GMT

Same error here. Splunk 6.2.3 (264376) on Windows.