Reporting

outputcsv create_empty argument

firasarabo
Path Finder

I wanted to know how to specify create_empty argument for outputcsv command.

it works fine for me when wrting to the csv file, like:
...|outputcsv myfile.csv
however writing the following gives me errors saying "invalid arguement create_empty":
....|outputcsv create_empty=true myfile.csv

Thanks,
Firas

Tags (1)

firasarabo
Path Finder

It turns out that create_empty is introduced in version 4.3
I am using an older version.

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...