I tried playing around with outputcsv at the end; but what I was looking for was to set a schedule that emails results in csv format. I accomplished that using table command and then using sendemail command option 'inline=false'; then i saved the search and scheduled it so that worked for me. ... View more

This would be help!! http://docs.splunk.com/Documentation/Splunk/5.0/Indexer/RemovedatafromSplunk Just ready carefully... and always backup your files!! Regards Cris ... View more

When i say 'Splunk Admin group' i mean that you must be part of the AD group that grants you admin access on Splunk or that you have the required permissions to play with the 'System Settings' under the 'Manager' link. ... View more