topic Re: How can I export the events that are the result of a search? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-can-I-export-the-events-that-are-the-result-of-a-search/m-p/68243#M17091 <P>Can you give an example of the search you are using?</P> Mon, 11 Oct 2010 23:00:08 GMT Brian_Osburn 2010-10-11T23:00:08Z How can I export the events that are the result of a search? https://community.splunk.com/t5/Splunk-Search/How-can-I-export-the-events-that-are-the-result-of-a-search/m-p/68242#M17090 <P>How can I export the results of a search? I run a search and I get 922 events. I would like to export (or produce a report) of those results. However, when I try to build a report, I just get the count of the events - not the events themselves? I have tried searching the manual and the knowledge base without success.</P> <P>Thanks.</P> Mon, 11 Oct 2010 21:33:16 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-export-the-events-that-are-the-result-of-a-search/m-p/68242#M17090 steveirogers 2010-10-11T21:33:16Z Re: How can I export the events that are the result of a search? https://community.splunk.com/t5/Splunk-Search/How-can-I-export-the-events-that-are-the-result-of-a-search/m-p/68243#M17091 <P>Can you give an example of the search you are using?</P> Mon, 11 Oct 2010 23:00:08 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-export-the-events-that-are-the-result-of-a-search/m-p/68243#M17091 Brian_Osburn 2010-10-11T23:00:08Z Re: How can I export the events that are the result of a search? https://community.splunk.com/t5/Splunk-Search/How-can-I-export-the-events-that-are-the-result-of-a-search/m-p/68244#M17092 <P>Multiple choices here Steve, from your search dashboard you can:<BR /> - Actions:Save results - for later viewing through Jobs manager page<BR /> - Actions:Export results - for exporting to .csv or other available formats<BR /> - Actions:Build report... - to build a report of the data. By default the report gets created as | timechourt count if you would like something different, then click on "Define Data using search language"<BR /> - Actions:Save search - if you want this to be an automated search. You can have it send you an email alert as well as a csv/pdf of the results. </P> <P>More on the above in the <A href="http://www.splunk.com/base/Documentation/latest/User/AboutthisUserManual" rel="nofollow">Users Manual</A> pages..</P> Mon, 11 Oct 2010 23:50:31 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-export-the-events-that-are-the-result-of-a-search/m-p/68244#M17092 Genti 2010-10-11T23:50:31Z