https://community.splunk.com/t5/Reporting/What-does-outputcsv-add-to/m-p/516799#M8375 <P>Trying to figure out what gets added upon running OUTPUTCSV vs manually exporting to CSV and how to remove it.</P><P>We run a weekly audit I'd like to automate and then run a script to zip the resulting file.</P><P>I did some experimenting and found that using outputcsv or outputlookup instead of exporting manually is almost tripling the file size of the output, from 300 Mb to 1.11 Gb.</P><P>Exact same search criteria, the exact same time range, returning the exact same number of results.</P><P>I also checked <A href="https://docs.splunk.com/Documentation/Splunk/8.0.5/SearchReference/Outputcsv" target="_blank" rel="noopener">https://docs.splunk.com/Documentation/Splunk/8.0.5/SearchReference/Outputcsv</A> and removed the internal fields it listed as being added.</P><P>Any insight here would be great!</P> Fri, 28 Aug 2020 20:00:07 GMT jessieb_83 2020-08-28T20:00:07Z https://community.splunk.com/t5/Reporting/What-does-outputcsv-add-to/m-p/516799#M8375 <P>Trying to figure out what gets added upon running OUTPUTCSV vs manually exporting to CSV and how to remove it.</P><P>We run a weekly audit I'd like to automate and then run a script to zip the resulting file.</P><P>I did some experimenting and found that using outputcsv or outputlookup instead of exporting manually is almost tripling the file size of the output, from 300 Mb to 1.11 Gb.</P><P>Exact same search criteria, the exact same time range, returning the exact same number of results.</P><P>I also checked <A href="https://docs.splunk.com/Documentation/Splunk/8.0.5/SearchReference/Outputcsv" target="_blank" rel="noopener">https://docs.splunk.com/Documentation/Splunk/8.0.5/SearchReference/Outputcsv</A> and removed the internal fields it listed as being added.</P><P>Any insight here would be great!</P> Fri, 28 Aug 2020 20:00:07 GMT https://community.splunk.com/t5/Reporting/What-does-outputcsv-add-to/m-p/516799#M8375 jessieb_83 2020-08-28T20:00:07Z