Getting Data In

Customize output csv file name base on field value?

phamxuantung
Communicator

Hello, I have query that produce a table like this:

Quantity Company
4 Company_A
63 Company_B
13 Company_C

 

The requirement that I have to send each company their own data with the attached csv with their name, for example "report_for_Company_A.csv" , "report_for_Company_B.csv".

Company A will receive their row of data with their attached file name.

I try to use

 

 

|<my search that produce the table>
|eval myCustomFileName = "Report_for_" + Company
|ouputcsv $myCustomFileName$.csv

 

 

It does have the field myCustomFileName correct but the file output was name $myCustomFileName$.csv.

How do I do it?

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @phamxuantung,

I'm not sure that's possible to use a variable for outputcsv command, but, if the number of companies isn't so large, you could schedule a report for each one that prepare a csv and directly send it by eMail.

Ciao.

Giuseppe

0 Karma

phamxuantung
Communicator

I'm considering making an alert for each company, but we're having over 40 associates, so that will require a bit of work creating and management, so I try to find a work around for a small requirement such as filename.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Build resilience for the agentic era: Join us at Splunk Go San Jose

AI is changing how organizations build, operate, and secure digital services. As teams adopt AI agents and ...

Manage Edge Processor pipelines end to end with APIs

This guide uses the Data Management APIs to create an Edge Processor, onboard one instance, deploy a pipeline ...

Splunk Brings Proof of Control to Digital Asset Transfers

Digital assets now sit inside the core of financial services. HSBC launched its Tokenized Deposit Service in ...