<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Load Saved Results via CLI in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/Load-Saved-Results-via-CLI/m-p/46597#M179352</link>
    <description>&lt;P&gt;Does anyone know how to load saved results from a previous search via CLI command?  The documentation suggests that we can run saved search via CLI command, but there is no mention of loading saved results from a previous search via CLI.&lt;/P&gt;

&lt;P&gt;The reason I asked is that we often run search over a large set of data that will take a long time to run (over a few hours), after the search, we would like to save the search result and export the large result set over CLI commands later.  Currently the UI limits the export to 10,000 rows.&lt;/P&gt;

&lt;P&gt;Thanks!&lt;/P&gt;</description>
    <pubDate>Thu, 09 Sep 2010 07:54:34 GMT</pubDate>
    <dc:creator>clincg</dc:creator>
    <dc:date>2010-09-09T07:54:34Z</dc:date>
    <item>
      <title>Load Saved Results via CLI</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Load-Saved-Results-via-CLI/m-p/46597#M179352</link>
      <description>&lt;P&gt;Does anyone know how to load saved results from a previous search via CLI command?  The documentation suggests that we can run saved search via CLI command, but there is no mention of loading saved results from a previous search via CLI.&lt;/P&gt;

&lt;P&gt;The reason I asked is that we often run search over a large set of data that will take a long time to run (over a few hours), after the search, we would like to save the search result and export the large result set over CLI commands later.  Currently the UI limits the export to 10,000 rows.&lt;/P&gt;

&lt;P&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Thu, 09 Sep 2010 07:54:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Load-Saved-Results-via-CLI/m-p/46597#M179352</guid>
      <dc:creator>clincg</dc:creator>
      <dc:date>2010-09-09T07:54:34Z</dc:date>
    </item>
    <item>
      <title>Re: Load Saved Results via CLI</title>
      <link>https://community.splunk.com/t5/Splunk-Search/Load-Saved-Results-via-CLI/m-p/46598#M179353</link>
      <description>&lt;P&gt;Take a look at the &lt;A href="http://www.splunk.com/base/Documentation/latest/SearchReference/Loadjob" rel="nofollow"&gt;loadjob&lt;/A&gt; command. You can load the results set of a previously executed job if you know either the job's ID or the name of the saved search run. This should work just fine from the CLI.&lt;/P&gt;</description>
      <pubDate>Thu, 09 Sep 2010 19:20:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/Load-Saved-Results-via-CLI/m-p/46598#M179353</guid>
      <dc:creator>ftk</dc:creator>
      <dc:date>2010-09-09T19:20:45Z</dc:date>
    </item>
  </channel>
</rss>

