download the masking after indexing?

New Member

There is a requirement , where i am uploading the file and doing masking through the sourcetype using props.conf.

i want to download the just the source file with masking.

Thanks In advance.

Tags (1)
0 Karma


You could try run a search to gather all events from the file and use the export as raw format feature?

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!