Reporting

outputcsv: can I tell it where to create the CSV

Splunk Employee
Splunk Employee

instead of /var/run/splunk? I would like to stay away from having to point to or move the file in a script.

Tags (1)
1 Solution

Splunk Employee
Splunk Employee

There is not. You can create a script that is triggered after the search is done and the outputcsv has written the file and explicitly put it into a Splunk bin folder to do this, but you probably knew that.

Part of the reason is security related, to prevent search users from being able to have Splunk create files in arbitary locations.

View solution in original post

Splunk Employee
Splunk Employee

There is not. You can create a script that is triggered after the search is done and the outputcsv has written the file and explicitly put it into a Splunk bin folder to do this, but you probably knew that.

Part of the reason is security related, to prevent search users from being able to have Splunk create files in arbitary locations.

View solution in original post

State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!