https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268472#M189946 <P>Thanks Woodcock for your help.</P> Thu, 21 Jul 2016 16:44:15 GMT chintan_shah 2016-07-21T16:44:15Z https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268466#M189940 <P>Hi, i have a requirement of combining multiple independent searches into a single excel/csv file and schedule a single email for sending the results.<BR /> can anyone help me out please?</P> Thu, 21 Jul 2016 15:05:47 GMT https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268466#M189940 chintan_shah 2016-07-21T15:05:47Z https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268467#M189941 <P>Schedule your multiple independent searches and update the lookup for each search using | outputlookup [append=true]. Then have another search scheduled at a slightly later point of time to read from this lookup and email the results</P> <P>There is another solution where you can club all your independent searches into one search using append. You might hit into sub search limit issues this way<BR /> <PRE> search1 append [search 2]<BR /> </PRE></P> Thu, 21 Jul 2016 15:19:47 GMT https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268467#M189941 pradeepkumarg 2016-07-21T15:19:47Z https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268468#M189942 <P>You can use some combination of the following commands (read the dox and make a decision): <CODE>inputcsv</CODE>, <CODE>outputcsv</CODE>, <CODE>loadjob</CODE>, <CODE>savesearch</CODE>, <CODE>sendemail</CODE>.</P> Thu, 21 Jul 2016 15:48:37 GMT https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268468#M189942 woodcock 2016-07-21T15:48:37Z https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268469#M189943 <P>Thanks for your response. but i missed a point where i want all the results to be in separate tabs.</P> Thu, 21 Jul 2016 16:29:05 GMT https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268469#M189943 chintan_shah 2016-07-21T16:29:05Z https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268470#M189944 <P>Thanks for your response. but i missed a point where i want all the results to be in separate tabs.</P> Thu, 21 Jul 2016 16:29:10 GMT https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268470#M189944 chintan_shah 2016-07-21T16:29:10Z https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268471#M189945 <P>Impossible with native splunk but there may be something like this on splunkbase (I doubt it).</P> Thu, 21 Jul 2016 16:35:40 GMT https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268471#M189945 woodcock 2016-07-21T16:35:40Z https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268472#M189946 <P>Thanks Woodcock for your help.</P> Thu, 21 Jul 2016 16:44:15 GMT https://community.splunk.com/t5/Splunk-Search/Combining-multiple-independent-searches-result-into-excel-csv/m-p/268472#M189946 chintan_shah 2016-07-21T16:44:15Z