Hi,
Is it possible to save search results with specific name and save that csv in my own directory means I want to save that csv file in another server not in the $SPLUNK_HOME/var/run/splunk
Example:
... | outputcsv abc - instead of this can I save my file like abc1 for firstday and for second day if i run the same query is it possible to change 1 to 2 (abc2), next day +1 to previous day means abc3.
Thanks in advance
The renaming of the export file can be done via subsearch based on current day OR any other suitable logic. But sending the exported file to some other directory is not possible via Search Interface. You'd need other means to get the data to custom directory. See some options here
http://docs.splunk.com/Documentation/Splunk/6.2.4/Search/Exportsearchresults
Thank you so much. I will try with those options
Why did you add this as a comment
instead of an answer
(I was about to give a very similar answer
)?