https://community.splunk.com/t5/Getting-Data-In/How-to-filter-fields-in-exporting-logs-into-csv-in-Web-GUI/m-p/638998#M109114 <P>Just utilize table command. e.g.:</P><P>index=* earliest=timestamp latest=timestamp|table _raw, _time, host</P> Thu, 06 Apr 2023 11:22:47 GMT kristen 2023-04-06T11:22:47Z https://community.splunk.com/t5/Getting-Data-In/How-to-filter-fields-in-exporting-logs-into-csv-in-Web-GUI/m-p/638997#M109113 <P>I am sampling the logs of the last 24 hours in GUI by<BR />1. search queries: index=*</P> <P>2. On GUI timeframe options, select last24 hours</P> <P>3. Click search</P> <P>4. Search completed</P> <P>5. Export results to csv</P> <P>&nbsp;</P> <P>In the csv obtained, it is seen that it parsed all of the fields in each event log into a new column, resulting too many columns in the csv. I would only like to export _raw, timestamp, host into the csv. Would there be any suggestion? Thank you.</P> Thu, 06 Apr 2023 17:22:43 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-filter-fields-in-exporting-logs-into-csv-in-Web-GUI/m-p/638997#M109113 kristen 2023-04-06T17:22:43Z https://community.splunk.com/t5/Getting-Data-In/How-to-filter-fields-in-exporting-logs-into-csv-in-Web-GUI/m-p/638998#M109114 <P>Just utilize table command. e.g.:</P><P>index=* earliest=timestamp latest=timestamp|table _raw, _time, host</P> Thu, 06 Apr 2023 11:22:47 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-filter-fields-in-exporting-logs-into-csv-in-Web-GUI/m-p/638998#M109114 kristen 2023-04-06T11:22:47Z