topic Splunk rest api change column order. in Getting Data In

Splunk rest api change column order.

voffko — Wed, 13 Jun 2012 15:31:33 GMT

Hello,
I am using splunk 4.2.5
When I export data to csv file from splunk via rest api I encountered a problem. Splunk change column order in csv file. How can I export data to csv with a certain column order?

Best regards, Vladimir.

Re: Splunk rest api change column order.

sowings — Tue, 30 Apr 2013 18:39:54 GMT

You can use the "table" command to set the desired order, even of an existing CSV file.

|inputlookup file.csv | table field1, field2, foo, bar | outputlookup file.csv

It should now have the order you specified in the table command.