Getting Data In

Is there a way to directly get the results as csv using a browser


Is there a way to view a splunk query directly as a CVS?

In reviewing the REST API the curl command below gets me the output as CSV

curl -k -u userABC:pass#### https://splunk.server:8089/services/search/jobs/1488985371.7077_D6AE46D6-FC4C-48A5-9F24-7912363C18D1... -d output_mode=csv --get

when i copy and past the URL (https://splunk.server:8089/services/search/jobs/1488985371.7077_D6AE46D6-FC4C-48A5-9F24-7912363C18D1...) into a browser, it displays it as an xml. Is there a way to display this URL as a csv in a browser?

0 Karma


Run the following direcly in Splunk Search. Make use of rest generating command which outputs results in table.

| rest /services/search/jobs/1488985371.7077_D6AE46D6-FC4C-48A5-9F24-7912363C18D1/results/

Refer to Splunk documentation for details:

| makeresults | eval message= "Happy Splunking!!!"
0 Karma