Splunk output

[shri_27]

Hi
I need to send the output generated using Splunk (output is currently a table) as a file onto a directory on a linux machine. Without Splunk this is being done using FTP. Could you pls let know how I can achieve this with splunk?

[gfuente]

Hello

Have you tried the outputlookup command:

http://docs.splunk.com/Documentation/Splunk/5.0.2/SearchReference/Outputlookup

...| outputlookup users.csv

It will write the table into a file in the app lookups folder, then you could move it using an script to the final linux directory where the file had to be stored.

Regards