Splunk Search

Search history file?

reedmohn
Communicator

In users' /search/history folder there is a file named .csv
(I guess that could be , as they are the same here)

In the Splunkd logs we see this message frequently:

ERROR SearchResults - Unable to write to file '/search/history/.csv'.  Retried 5 times, period=500 ms. error='No such file or directory'

This seems to apply to all users.
Anyone know why this is happening?

Tags (3)

yannK
Splunk Employee
Splunk Employee

I would expect to see a file named "/search/history.csv" not "/search/history/.csv"
On which version are you ?

0 Karma
Get Updates on the Splunk Community!

Your Guide to Splunk Digital Experience Monitoring

A flawless digital experience isn't just an advantage, it's key to customer loyalty and business success. But ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...