topic Re: CLI Search - Export JSON File? in Splunk Search

CLI Search - Export JSON File?

cramasta — Thu, 06 Oct 2011 20:01:40 GMT

Can I run a CLI search that will output the results to a file in json format?
Thanks,
Joe

Re: CLI Search - Export JSON File?

araitz — Thu, 19 Apr 2012 03:43:16 GMT

Coming soon to a Splunk version near you, watch the release notes...

Re: CLI Search - Export JSON File?

zsbbb — Thu, 15 Sep 2022 13:38:12 GMT

New to splunk and bringing this back up - how does one do this?

For context, I have a splunk container running on docker, and was hoping to translate the splunk index data into json using a cli search and saving the output as a local file.

Thanks!

Re: CLI Search - Export JSON File?

scelikok — Fri, 16 Sep 2022 05:27:13 GMT

Hi @zsbbb,

You can export any search output as json using below sample;

curl -k -u admin:changeme https://localhost:8089/services/search/jobs/export -d search="search sourcetype=access_* earliest=-7d" -d output_mode=json -o /path/to/local/file.json