Is it possible to redirect the outputcsv so that the csv file get returned to the browers so that the brower will offer a “file save as dialog” and the user can save the result to the location he desires?
The user that needs the results in csv format does not have access to the Splunk server and does not want to call the administrator every time he needs the information.
Thx Joon
Hi, why not to run the search without the "outputcsv" command, wait for completion, and the user then clicks
Actions -> Export results ...
on the menubar, next to "Search", to save the results in csv format onto his machine?