https://community.splunk.com/t5/Reporting/How-can-I-limit-outputcsv-file-size/m-p/18035#M313 <P>if you precede the outputcsv command with the head command that will limit it for this search. </P> <PRE><CODE>mysearch | head 1000 | ouputcsv mcsvfile.csv </CODE></PRE> <P>or are you looking for a more global setting?</P> Wed, 04 Apr 2012 10:59:19 GMT BobM 2012-04-04T10:59:19Z https://community.splunk.com/t5/Reporting/How-can-I-limit-outputcsv-file-size/m-p/18034#M312 <P>Is there a possibility to limit the filesize for csv files that are generated by the outputcsv command?</P> Wed, 04 Apr 2012 09:17:16 GMT https://community.splunk.com/t5/Reporting/How-can-I-limit-outputcsv-file-size/m-p/18034#M312 chris 2012-04-04T09:17:16Z https://community.splunk.com/t5/Reporting/How-can-I-limit-outputcsv-file-size/m-p/18035#M313 <P>if you precede the outputcsv command with the head command that will limit it for this search. </P> <PRE><CODE>mysearch | head 1000 | ouputcsv mcsvfile.csv </CODE></PRE> <P>or are you looking for a more global setting?</P> Wed, 04 Apr 2012 10:59:19 GMT https://community.splunk.com/t5/Reporting/How-can-I-limit-outputcsv-file-size/m-p/18035#M313 BobM 2012-04-04T10:59:19Z https://community.splunk.com/t5/Reporting/How-can-I-limit-outputcsv-file-size/m-p/18036#M314 <P>Thanks. This is a good start, as a Splunk admin I'd prefer a to have a more global setting. I don't want to check every saved search and make sure, that they aren't storing _raw fields to csvs that are never used later on. I'll leave this open for a little while to see if there are any other ideas.</P> Thu, 05 Apr 2012 16:54:47 GMT https://community.splunk.com/t5/Reporting/How-can-I-limit-outputcsv-file-size/m-p/18036#M314 chris 2012-04-05T16:54:47Z