In users' /search/history folder there is a file named .csv
(I guess that could be , as they are the same here)
In the Splunkd logs we see this message frequently:
ERROR SearchResults - Unable to write to file '/search/history/.csv'. Retried 5 times, period=500 ms. error='No such file or directory'
This seems to apply to all users.
Anyone know why this is happening?
I would expect to see a file named "/search/history.csv" not "/search/history/.csv"
On which version are you ?