Screenshot of issue:
Here are my setup with my current issue:
Attached below is the search command in CLI I used:
/opt/splunk/bin/splunk search "|savedsearch TestReport" -maxout 0 -auth test:test
Additionally, below is the content of such savedsearch:
index=myindex(sourcetype=sourcetype1 OR sourcetype=sourcetype2) _index_earliest="01/17/2020:22:00:00" _index_latest="01/17/2020:22:59:00" | stats count
I need the search result of CLI to display once since I'm using its content to populate another csv which I will use for another purpose.
Kindly let me know if there is something that I need to reconfigure in my environment. Thank you!
There is an option that disables preview.
/opt/splunk/bin/splunk search "|savedsearch TestReport" -maxout 0 -auth test:test -preview false