https://community.splunk.com/t5/Splunk-Search/Search-with-output-mode-csv-ends-up-reordering-the-table-command/m-p/99554#M25661 <P>I ran into a similar issue... Ended up using <CODE>.... | table field1 field2 | outputcsv foo.csv</CODE> and it corrected the problem.</P> Sat, 24 Jan 2015 05:19:03 GMT ShaneNewman 2015-01-24T05:19:03Z https://community.splunk.com/t5/Splunk-Search/Search-with-output-mode-csv-ends-up-reordering-the-table-command/m-p/99553#M25660 <P>I am doing something like this:<BR /> [ignore some syntax issues]</P> <P>curl ... <A href="https://..../search/jobs/export" target="test_blank">https://..../search/jobs/export</A> -d 'search=search index=xyz ... | table Fld1 Fld2' -d output_mode=csv</P> <P>Expected output (as given to table command) is:<BR /> Fld1,Fl2<BR /> 123,abc</P> <P>Actual output is<BR /> Fld2,Fld1<BR /> abc ,123</P> <P>Any idea why it is getting re-ordered and how can I get it in the format I want?</P> Thu, 22 Mar 2012 19:38:02 GMT https://community.splunk.com/t5/Splunk-Search/Search-with-output-mode-csv-ends-up-reordering-the-table-command/m-p/99553#M25660 paragcisco 2012-03-22T19:38:02Z https://community.splunk.com/t5/Splunk-Search/Search-with-output-mode-csv-ends-up-reordering-the-table-command/m-p/99554#M25661 <P>I ran into a similar issue... Ended up using <CODE>.... | table field1 field2 | outputcsv foo.csv</CODE> and it corrected the problem.</P> Sat, 24 Jan 2015 05:19:03 GMT https://community.splunk.com/t5/Splunk-Search/Search-with-output-mode-csv-ends-up-reordering-the-table-command/m-p/99554#M25661 ShaneNewman 2015-01-24T05:19:03Z