Splunk Search

Export csv data to specific folder

Learner
Path Finder

Hi everyone, below is my sample query

 

index=xyz source=ABC | stats count

 

If I schedule this search then result have to saved on path "C:\\demo" automatically. I don't have access to \var repository so cannot make changes over there. I'm using windows OS. How i can get the data on path automatically? 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Learner,

you have two solutions:

  • a scheduled script that moves the files from var/run/splunk/csv to another folder;
  • modify the python script that creates the csv.

The second is really difficoult, but the first it's easy.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...