I do have a Python code to run an query and export the search results to .csv files. The program is working perfectly fine but when i opened the search results i could not see all the results. I just validated the same by running the query manually in splunk and exported the result and compared the results with the one which is generated through my code. I am running the query for last 2 hours. My Code - import time import splunklib.client as client import splunklib.results as results import csv import random HOST = "Server" PORT = 8089 USERNAME = "user" PASSWORD = "password" service = client.connect( host=HOST, port=PORT, username=USERNAME, password=PASSWORD) My splunk query file with open('H:\Query1.txt', 'r') as myfile: Splunk_query=myfile.read() Executing the query for last 2 hours results_kwargs = { "earliest_time": "-2h", "latest_time": "now", "search_mode": "normal", "output_mode": "csv" } oneshotsearch_results = service.jobs.oneshot(Splunk_query, **results_kwargs) f=open("H:\lasttwohours.csv", 'w') f.write(oneshotsearch_results.read()) f.close() Kindly help me with the export with the absolute results which i am getting it from splunk. NOTE : I dont have permission to change any .conf file since this is the restricted environment. I can run my program and get the results from splunk. ... View more