Splunk Dev

how to save the output inside splunk every week?

logloganathan
Motivator

i have query which will run every week, i want to save the output in the csv format inside splunk and want to query the output to get the data. is it possible?

Tags (1)
0 Karma
1 Solution

nilbak1
Communicator

Hi @logloganathan

There is one action defined in scheduled report Output results to a CSV lookup

You can you this action to save the output in the csv format in splunk.
Then you can use this csv file to get the data.

View solution in original post

0 Karma

nilbak1
Communicator

Hi @logloganathan

There is one action defined in scheduled report Output results to a CSV lookup

You can you this action to save the output in the csv format in splunk.
Then you can use this csv file to get the data.

0 Karma

soumyasaha25
Contributor

yes you can use the outputlookup command for it. see more details about it here

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...