All Apps and Add-ons

Extracting results to a csv file

Djackson72
New Member

Hi,

 

I was wondering if I could do two things. I am new to splunk so please have mercy on me. I am looking for a query that will search inside a mailbox and look for a certain subject. Once it find that subject I would like to extract the recipients to a csv file for the last 40 days. Is this possible?

 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

If your mailboxes are indexed in Splunk then Splunk can search them.  Splunk cannot reach out to your email provider to search your mail.

With your email indexed, Splunk can search for the specified subject and extract the recipients (if in the index).  The final results of the search can be saved to a CSV file by using the outputcsv command.  See https://docs.splunk.com/Documentation/Splunk/8.2.1/SearchReference/Outputcsv

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...