topic Re: How to export search results into a text file using search in Splunk Search

How to export search results into a text file using search

mbasharat — Tue, 05 Apr 2022 20:46:08 GMT

Hi,

I am exploring some options for exporting data into text file from Splunk. I have a scheduled saved search which produces results like below in statistical table format. I need this to be written to a .txt file. Results written need to be appended to existing txt file.

count index sourcetype time results

0 A B 04/05/2022 00:00:00 Success exceeds Failures

Thanks in-advance!!!!!!

Re: How to export search results into a text file using search

mayurr98 — Tue, 05 Apr 2022 20:55:55 GMT

see if this helps !

https://community.splunk.com/t5/Splunk-Search/Export-results-to-txt/m-p/105583

Re: How to export search results into a text file using search

mbasharat — Tue, 05 Apr 2022 21:00:48 GMT

I tried but thats for raw. I tried using it for stats table and it did not generate anything in specified directory.

Re: How to export search results into a text file using search

mayurr98 — Tue, 05 Apr 2022 21:10:34 GMT

you would need to format the output

Re: How to export search results into a text file using search

mbasharat — Tue, 05 Apr 2022 21:33:54 GMT

Understood. Testing it for output. Will update shortly. Thank you.

Re: How to export search results into a text file using search

mbasharat — Tue, 05 Apr 2022 21:41:37 GMT

Quick Q. The file frim savedsearch will be written on SH correct? We have SH cluster. Also, can path be defined at SPL level? Thanks.

Re: How to export search results into a text file using search

mayurr98 — Wed, 06 Apr 2022 15:07:40 GMT

I do not think you can change the path explicitly in SPL

https://community.splunk.com/t5/Getting-Data-In/How-to-change-the-location-a-saved-search-outputs-a-CSV-file-to/m-p/204917

however, you can write cron jobs to move the file on OS level.