save search results as CSV with specific name

[Laya123]

Hi,

Is it possible to save search results with specific name and save that csv in my own directory means I want to save that csv file in another server not in the $SPLUNK_HOME/var/run/splunk

Example:

... | outputcsv abc - instead of this can I save my file like abc1 for firstday and for second day if i run the same query is it possible to change 1 to 2 (abc2), next day +1 to previous day means abc3.

Thanks in advance

[somesoni2]

The renaming of the export file can be done via subsearch based on current day OR any other suitable logic. But sending the exported file to some other directory is not possible via Search Interface. You'd need other means to get the data to custom directory. See some options here

http://docs.splunk.com/Documentation/Splunk/6.2.4/Search/Exportsearchresults

[Laya123]

Thank you so much. I will try with those options

[woodcock]

Why did you add this as a comment instead of an answer (I was about to give a very similar answer)?