https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75377#M181350 <P>We're searching an IP address. Searche results for other IP addresses can be exported, but for some reason this one shows the error. The data in the results events look fine.</P> <P>We are on v. 4.3.3 in a distributed environment.</P> Mon, 01 Oct 2012 18:23:29 GMT gmonroe 2012-10-01T18:23:29Z https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75373#M181346 <P>When trying to export search results, I'm getting an error that reads "File not found. Firefox can't find the file at http...".</P> <P>What would cause this and what are possible fixes for it?</P> Sat, 29 Sep 2012 00:03:27 GMT https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75373#M181346 gmonroe 2012-09-29T00:03:27Z https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75374#M181347 <P>Sounds like access privileges? Are you running as admin or equiv, or has your user id sufficient permissions? If you have CLI access perhaps also check out the access controls in.../metadata filename is default.meta. Export may be set to Admin as the default.<BR /> Best wishes.<BR /> D</P> Sun, 30 Sep 2012 13:19:03 GMT https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75374#M181347 DaveSavage 2012-09-30T13:19:03Z https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75375#M181348 <P>Dave, thanks for responding. I don't think it's a permissions issue. I, and other users, are able to export other search results, but this one in particular returns the error. In the meantime, I will do as you suggested and check the access controls and all permissions.</P> Mon, 01 Oct 2012 06:41:21 GMT https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75375#M181348 gmonroe 2012-10-01T06:41:21Z https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75376#M181349 <P>Could you post the search? Also what version are you running? Is this a distributed environment?</P> Mon, 01 Oct 2012 08:32:13 GMT https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75376#M181349 Drainy 2012-10-01T08:32:13Z https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75377#M181350 <P>We're searching an IP address. Searche results for other IP addresses can be exported, but for some reason this one shows the error. The data in the results events look fine.</P> <P>We are on v. 4.3.3 in a distributed environment.</P> Mon, 01 Oct 2012 18:23:29 GMT https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75377#M181350 gmonroe 2012-10-01T18:23:29Z https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75378#M181351 <P>We are havnig the same problem - even if Admin runs the same query. In fact, it seems to depend on how many rows are returned. If we return many rows, then the export returns this error more frequently. We have found that if we wait a minute or two, then we can click on the "Try Again" link in the message and it sometimes works. Also, if we cut and paste the link to the exported data, it starts to export. The queries that tend to do this also have many columns (80?).</P> <P>We are running 4.3.1, build 119532 on our local search head in a globally distributed env.</P> Wed, 03 Oct 2012 13:55:37 GMT https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75378#M181351 reed_kelly 2012-10-03T13:55:37Z https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75379#M181352 <P>When you extend your searchstring with <BR /> | table _raw | outputcsv output.csv<BR /> you can find you exprted results in $SPLUNK_HOME/var/run/splunk. </P> Mon, 28 Sep 2020 15:52:46 GMT https://community.splunk.com/t5/Splunk-Search/File-not-found-on-export/m-p/75379#M181352 Moritz 2020-09-28T15:52:46Z