Getting Data In
Highlighted

save search results as CSV with specific name

Communicator

Hi,

Is it possible to save search results with specific name and save that csv in my own directory means I want to save that csv file in another server not in the $SPLUNK_HOME/var/run/splunk

Example:

... | outputcsv abc - instead of this can I save my file like abc1 for firstday and for second day if i run the same query is it possible to change 1 to 2 (abc2), next day +1 to previous day means abc3.

Thanks in advance

Tags (2)
0 Karma
Highlighted

Re: save search results as CSV with specific name

SplunkTrust
SplunkTrust

The renaming of the export file can be done via subsearch based on current day OR any other suitable logic. But sending the exported file to some other directory is not possible via Search Interface. You'd need other means to get the data to custom directory. See some options here

http://docs.splunk.com/Documentation/Splunk/6.2.4/Search/Exportsearchresults

Highlighted

Re: save search results as CSV with specific name

Esteemed Legend

Why did you add this as a comment instead of an answer (I was about to give a very similar answer)?

0 Karma
Highlighted

Re: save search results as CSV with specific name

Communicator

Thank you so much. I will try with those options

0 Karma