Save reports locally

[sebas0118]

Hello everyone,

I hope you are doing well. I have a request for your support. I have multiple reports that I need to save locally in a folder on the server where Splunk is hosted. I would greatly appreciate your assistance in validating the process. Thank you very much.

[gcusello]

Hi @sebas0118,

I suppose that you are speaking of csv reports that you generate adding outputcsv to your searches.

In this case, they are generated in the folder $SPLUNK_HOME/var/run/splunk/csv and it isn't possible to modify this destination, so you could create a shall script that copies these csv files from this location in a different folder.

This is a requirement that I saw in many posts, add it to Splunk Ideas (https://ideas.splunk.com/) so probably this feature will be taken in consideration by Splunk development team.

Ciao.

Giuseppe