topic Unable to Export Events from Cmd line in Reporting https://community.splunk.com/t5/Reporting/Unable-to-Export-Events-from-Cmd-line/m-p/45993#M947 <P>I am attempting to move data from one index to another. I've read that the way to do this is to export the events you want to move, then import them using the Export and Import commands. However, when I attempt to export the commands, I get an error. Here's my syntax and error: </P> <P>splunk export eventdata -index IISLOGS -host WWW01 -dir f:\temp</P> <P>Failed cli cmd export</P> <P>Anyone know what is causing this?</P> Wed, 20 Jul 2011 22:11:17 GMT richnavis 2011-07-20T22:11:17Z Unable to Export Events from Cmd line https://community.splunk.com/t5/Reporting/Unable-to-Export-Events-from-Cmd-line/m-p/45993#M947 <P>I am attempting to move data from one index to another. I've read that the way to do this is to export the events you want to move, then import them using the Export and Import commands. However, when I attempt to export the commands, I get an error. Here's my syntax and error: </P> <P>splunk export eventdata -index IISLOGS -host WWW01 -dir f:\temp</P> <P>Failed cli cmd export</P> <P>Anyone know what is causing this?</P> Wed, 20 Jul 2011 22:11:17 GMT https://community.splunk.com/t5/Reporting/Unable-to-Export-Events-from-Cmd-line/m-p/45993#M947 richnavis 2011-07-20T22:11:17Z Re: Unable to Export Events from Cmd line https://community.splunk.com/t5/Reporting/Unable-to-Export-Events-from-Cmd-line/m-p/45994#M948 <P>yah.. turns out that you need to stop splunkd to run this command.. doh!</P> Wed, 20 Jul 2011 23:22:19 GMT https://community.splunk.com/t5/Reporting/Unable-to-Export-Events-from-Cmd-line/m-p/45994#M948 richnavis 2011-07-20T23:22:19Z Re: Unable to Export Events from Cmd line https://community.splunk.com/t5/Reporting/Unable-to-Export-Events-from-Cmd-line/m-p/45995#M949 <P>Have you looked into using <CODE>exporttool</CODE> and <CODE>importtool</CODE>? Another option is to simply move an entire bucket. (You have to be careful to use a bucket id that's not already in use.</P> <P>You may find this answer useful:</P> <UL> <LI><A href="http://splunk-base.splunk.com/answers/25174/how-to-exportimport-events-from-indexes">http://splunk-base.splunk.com/answers/25174/how-to-exportimport-events-from-indexes</A></LI> </UL> Thu, 21 Jul 2011 18:35:44 GMT https://community.splunk.com/t5/Reporting/Unable-to-Export-Events-from-Cmd-line/m-p/45995#M949 Lowell 2011-07-21T18:35:44Z