The manual (https://docs.splunk.com/Documentation/Splunk/6.4.2/SearchReference/Dump) talks about using "_dstpath", I tried _dstpath='hdfs://:port/testdir' but it didn't work. Any idea if this is possible and how to do it?
I know one way is to schedule export but I wanted to try other options especially when it is one time thing and not recurring that I schedule task.
↧