Splunk Search

Search history file?


In users' /search/history folder there is a file named .csv
(I guess that could be , as they are the same here)

In the Splunkd logs we see this message frequently:

ERROR SearchResults - Unable to write to file '/search/history/.csv'.  Retried 5 times, period=500 ms. error='No such file or directory'

This seems to apply to all users.
Anyone know why this is happening?

Tags (3)

Splunk Employee
Splunk Employee

I would expect to see a file named "/search/history.csv" not "/search/history/.csv"
On which version are you ?

0 Karma