Getting Data In

Is it possible to change the default output CSV file location/path?


Hi Exports ,

I need to find a way to export the csv file to a specific location/path after searching.

Somebody said this is not possible to change, but please also confirm. If anybody knows, please share. Thanks in advance.

Please leave the hyperlinks here if you have any

0 Karma


That's not possible with outputlookup. All files of this command reside in either $SPLUNK_HOME/etc/apps/*/lookups or $SPLUNK_HOME/etc/system/lookups.

If you need to use different paths, you could use external lookups with a script that writes the file to any relative path.

0 Karma