Splunk Search

Search history file?

reedmohn
Communicator

In users' /search/history folder there is a file named .csv
(I guess that could be , as they are the same here)

In the Splunkd logs we see this message frequently:

ERROR SearchResults - Unable to write to file '/search/history/.csv'.  Retried 5 times, period=500 ms. error='No such file or directory'

This seems to apply to all users.
Anyone know why this is happening?

Tags (3)

yannK
Splunk Employee
Splunk Employee

I would expect to see a file named "/search/history.csv" not "/search/history/.csv"
On which version are you ?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...