Getting Data In

How to save the CSV file to external location

khumer
Explorer

I would like to save the CSV file to an external location. I am using the |outputcsv command which is saving the file to a Linux but I need the file to be picked up from there and move to external location such as WVDCCRVFASS\ETL\FlatFiles\Splunk.

Can you please all let me know how can this be done?

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Use a cron job to copy the file to the desired location.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Use a cron job to copy the file to the desired location.

---
If this reply helps you, Karma would be appreciated.
0 Karma

khumer
Explorer

Could you please list out the steps? I havn’t had this req before. Thanks!

0 Karma

richgalloway
SplunkTrust
SplunkTrust

It's not really a Splunk solution. You write a shell script that copies a file from one place (Splunk) to another (the external directory) then use cron to run the script some time after the Splunk job is scheduled to create the file.

See https://opensource.com/article/17/11/how-use-cron-linux for a good introduction to cron.

---
If this reply helps you, Karma would be appreciated.
0 Karma

khumer
Explorer

Thank you!

0 Karma

khumer
Explorer

Could you please list out the steps?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...