topic Re: export more than 10K events in All Apps and Add-ons

export more than 10K events

fatbrainz — Tue, 29 Nov 2011 08:26:59 GMT

Hi,

I was trying to export a result with more than 60K events with Excel Export module but no matter how many "Max # of results to export" I set, I always got a xls file with 10K lines. Is it possible to export 10K+ events?

By the way, is there any way I can use this great app on version 4.1?

Thanks.

Re: export more than 10K events

fatbrainz — Wed, 30 Nov 2011 01:12:32 GMT

Sorry, I didn't explain clear. I was asking if there is any chance to export more than 10K events with Splunk for Excel Export apps.

http://splunk-base.splunk.com/apps/29336/splunk-for-excel-export

Thanks.

Re: export more than 10K events

priyohw — Wed, 30 Nov 2011 05:38:27 GMT

is it only works on *nix
or can we do it in windows/

Re: export more than 10K events

araitz — Wed, 07 Dec 2011 16:33:45 GMT

The app works on unix and Windows.

Re: export more than 10K events

araitz — Mon, 12 Dec 2011 22:10:52 GMT

Version 1.1 of the app allows streaming export of up to 65535 events/results, which is the current row limit per sheet in xlwt.

Update: In version 1.2, which I uploaded a few moments ago, you can export up to 1 million results, with up to 65,000 rows per sheet.

Re: export more than 10K events

fatbrainz — Tue, 13 Dec 2011 08:50:39 GMT

The search I was running is just events. I didn't use any transforming command and I put the ExcelExport module in flashtimeline.

I just did another test with a fresh install of version 4.2.4 with ExcelExport module. I searched with the command "index=_internal" and got 41,209 event. Then I export to excel and set "Max # of results to export" to 40,000 but I still got a excel file with 10,000 lines.

Re: export more than 10K events

araitz — Tue, 13 Dec 2011 08:57:20 GMT

Yes, see my edit above - version 1.1 alleviates this issue up to 65535 results.

Re: export more than 10K events

araitz — Thu, 19 Jan 2012 03:09:23 GMT

See my edit above regarding version 1.2