Getting Data In

Is there a way to directly get the results as csv using a browser


Is there a way to view a splunk query directly as a CVS?

In reviewing the REST API the curl command below gets me the output as CSV

curl -k -u userABC:pass#### https://splunk.server:8089/services/search/jobs/1488985371.7077_D6AE46D6-FC4C-48A5-9F24-7912363C18D1... -d output_mode=csv --get

when i copy and past the URL (https://splunk.server:8089/services/search/jobs/1488985371.7077_D6AE46D6-FC4C-48A5-9F24-7912363C18D1...) into a browser, it displays it as an xml. Is there a way to display this URL as a csv in a browser?

0 Karma


Run the following direcly in Splunk Search. Make use of rest generating command which outputs results in table.

| rest /services/search/jobs/1488985371.7077_D6AE46D6-FC4C-48A5-9F24-7912363C18D1/results/

Refer to Splunk documentation for details:

| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...