All Apps and Add-ons
Highlighted

outputcsv export directory

Explorer

Hi There,

Just wondering if i can change the export directory (i.e F:\ExportResults) using outputcsv command ?

Thanks
Henry

0 Karma
Highlighted

Re: outputcsv export directory

SplunkTrust
SplunkTrust

Hi henrytyleung,

No you cannot.
You could create a custom script that is triggered after the search is done and the outputcsv has written the file and explicitly put it into a Splunk bin folder to move / copy file to the final directory http://docs.splunk.com/Documentation/Splunk/6.2.0/Search/AddthecustomcommandtoSplunk

The reason why this was done, is partly security related; to prevent search users from being able to have Splunk create files in arbitrary locations.

hope this helps ...

cheers, MuS

0 Karma