How to use Spring XML Application to read data and retrieve search results from Splunk and convert it into CSV format?

[meduriphani]

Hi,

I have an application (Spring XML Application) which needs to read data from Splunk and convert it into CSV format.

I am new to Splunk. Any guidance?

Thanks,
Phanendra

[hunters_splunk]

Hi Phanendra,

There are two search commands you can use to convert Splunk search results into .csv.

outputcsv
This command saves search results to the specified CSV file on the local search head in the $SPLUNK_HOME/var/run/splunk/csv directory. Updates to $SPLUNK_HOME/var/run/*.csv using the outputcsv command are not replicated across the cluster.
For details, see http://docs.splunk.com/Documentation/Splunk/6.5.1/SearchReference/Outputcsv.

outputlookup
Writes search results to a static lookup table or KV store collection that you specify.
For details, see http://docs.splunk.com/Documentation/Splunk/6.5.1/SearchReference/Outputlookup.

Hope this helps. Thanks!
Hunter

[meduriphani]

Hi Hunter,

Thank you for your reply. Another application is keep on writing the data. My Spring XML application has to query for every 2 minutes and retrieve the data in CSV format from the last fetch record. It should not read the data which is already read. The output CSV file must be returned to my application, It should not be saved onto local search head.

Right now, my application is throwing error the below error.

[java.lang.Error - Unresolved compilation problems:
The import com.google cannot be resolved
The import com.google cannot be resolved
JsonReader cannot be resolved to a type

Any suggestions?

Thanks,
Phanendra Meduri