Is there a way to view a splunk query directly as a CVS?
In reviewing the REST API the curl command below gets me the output as CSV
curl -k -u userABC:pass#### https://splunk.server:8089/services/search/jobs/1488985371.7077_D6AE46D6-FC4C-48A5-9F24-7912363C18D1... -d output_mode=csv --get
when i copy and past the URL (https://splunk.server:8089/services/search/jobs/1488985371.7077_D6AE46D6-FC4C-48A5-9F24-7912363C18D1...) into a browser, it displays it as an xml. Is there a way to display this URL as a csv in a browser?
Run the following direcly in Splunk Search. Make use of rest generating command which outputs results in table.
| rest /services/search/jobs/1488985371.7077_D6AE46D6-FC4C-48A5-9F24-7912363C18D1/results/
Refer to Splunk documentation for details: http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Rest