outputcsv sequence

[simo]

Hi all,

I have a scedulated serach every 30 minutes, which extracts a file in csv

search | outputcsv MyFile

I need to put a daily sequence in the file name

file name MyFile_01 (first file of the day) in the second extraction of the day the file name is MyFile_02

so on for all extractions.

can you help me? thanks for any answer

Best Regards,

Simone

[manjunathmeti]

hi @simo,

You can create filename count prefix based on the current hour when the scheduled search is triggered.

| outputcsv create_empty=t [| makeresults | eval hour=strftime(now(), "%H"), minutes=strftime(now(), "%M"), hour=if(minute>=30, hour*2, hour*2 + 1), filename="MyFile_".hour | return $filename]

If this reply helps you, an upvote/like would be appreciated.

[simo]

hi @manjunathmeti 

this might help, but if I don't extract a file because it is empty I end up with a wrong sequence.

Simone

[manjunathmeti]

create_empty=t creates empty files. But if you don't want empty files then it complicates things. 

Using Hour and minutes in the filename will be better option.