About logicasrl

logicasrl · ‎05-19-2010

SOLVED 🙂 The solution is to use ".cmd" and NOT ".bat" (at least in Win2008). With a ".cmd" script, there is NO NEED of doubling the double quotes and everything goes smooth. Thank you very much for the hint, gkanapathy 😉 Luca

logicasrl · ‎05-19-2010

Another request about the subject: which one could be a viable solution if there was the necessity of inserting a "timestamp" into the name of the "result.csv" file above? Thanks again, Luca

logicasrl · ‎05-19-2010

The preceding code still does not work. The strange thing is that the following works correctly (from within a .bat file): * splunk.exe search ""host="vmw03n" source="WinEventLog:Security" sourcetype="WinEventLog:Security" earliest_time="-24h""" -format csv -auth admin:password > C:\temp\splunklocalhost.csv I will proceed with new tests tomorrow. Luca

logicasrl · ‎05-18-2010

Thank you for the hint. See others trials below...

logicasrl · ‎05-18-2010

Perfect: it works like a charm 🙂 I've read the documentation, but I was not able to find such an information. Thank you very much, Luca

logicasrl · ‎05-18-2010

Simple question: how is it possible to export a search result in a CSV file in a scheduled manner (automatically) in Windows? The problem is the "automatically" term: from web interface, interactively, as a matter of fact there is NO problem... Splunk Version is 4.1.2. Thank you very much, Luca

logicasrl · ‎05-18-2010

Hi all, I've got a problem with the execution of this command from a Windows ".bat" script: splunk.exe search "| savedsearch test01" -app windows -format csv -auth admin:password > C:\temp\splunklocalhost.csv The command works perfectly from a command prompt (I'm on a Windows Server 2008 Standard). Tried also: splunk.exe search """| savedsearch test01""" -app windows -format csv -auth admin:password > C:\temp\splunklocalhost.csv and: splunk.exe search \"| savedsearch test01\" -app windows -format csv -auth admin:password > C:\temp\splunklocalhost.csv with no luck. The suspect is that there is something wrong with the double quotes and that the parameters are not passed correctly (by the Windows command interpreter) to "splunk.exe". Any ideas? Thank you very much, Luca

Posts	7
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎05-18-2010

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

Exporting search results automatically

Problem with "search" from Windows batch file

Re: Problem with "search" from Windows batch file

Re: Exporting search results automatically

Re: Problem with "search" from Windows batch file

Re: Problem with "search" from Windows batch file

Re: Exporting search results automatically

Exporting search results automatically

Problem with "search" from Windows batch file

Are you a member of the Splunk Community?