Hi all,
I have a scedulated serach every 30 minutes, which extracts a file in csv
search | outputcsv MyFile
I need to put a daily sequence in the file name
file name MyFile_01 (first file of the day) in the second extraction of the day the file name is MyFile_02
so on for all extractions.
can you help me? thanks for any answer
Best Regards,
Simone
hi @simo,
You can create filename count prefix based on the current hour when the scheduled search is triggered.
| outputcsv create_empty=t [| makeresults | eval hour=strftime(now(), "%H"), minutes=strftime(now(), "%M"), hour=if(minute>=30, hour*2, hour*2 + 1), filename="MyFile_".hour | return $filename]
If this reply helps you, an upvote/like would be appreciated.
this might help, but if I don't extract a file because it is empty I end up with a wrong sequence.
Simone
create_empty=t creates empty files. But if you don't want empty files then it complicates things.
Using Hour and minutes in the filename will be better option.