I'm completely new to splunk and I'm pretty stuck so I'm sorry in advance if any of this is unclear.
How would I be able to connect to splunk server on the internet, and retrieve the exported data in a CSV?
Where I am at is...
splunk -uri https://splunk.website.cc -auth user, pass
Any help would be appreciated.
easy way : use the web interface and use the "export result"
hard way : use the API to get the results in xml http://docs.splunk.com/Documentation/Splunk/5.0/RESTAPI/RESTsearches
and finally your method using the remote CLI, piping the result to a file in the correct format
splunk search "mysearch | table field1 field2 " -output csv -uri https://splunk.website.cc -auth user, pass > myresult.csv
View solution in original post