Archive
Highlighted

possible to get raw data instead of csv in script?

Path Finder

hi,

I have a script that uses this code http://splunk-base.splunk.com/answers/45794/want-to-forward-contents-of-stdin-to-my-script

but output is in csv format, is there a way to get the raw data instead?

Tags (3)
0 Karma
Highlighted

Re: possible to get raw data instead of csv in script?

Splunk Employee
Splunk Employee
 * | table _raw | outputcsv mysearch

This will output the results to $SPLUNK_HOME/var/run/splunk/mysearch.csv with just pure raw data in it.

0 Karma