Getting Data In

Need to export Splunk data (our application logs) to CSV using API

swethavelamala
New Member

Our application has over 3 million records every 24 hours that we need to export using Splunk. When we tried using Reports, we were getting a maximum of 50000 records. We were suggested to use Splunk API. Can anyone help on step to step on how to connect to Splunk API. Is it a URL or something? I have no clue..

Tags (1)
0 Karma

somesoni2
Revered Legend

If don't want to use SDK's, here is how you can export data by calling REST API endpoint for search:
https://docs.splunk.com/Documentation/Splunk/7.2.5/Search/ExportdatausingRESTAPI

harsmarvania57
Ultra Champion

You can achieve this using Splunk SDK.

Splunk SDK is available in 4 different programming language, have a look at http://dev.splunk.com/sdks

Here is explanation that how to run searches and jobs using Splunk Python SDK http://dev.splunk.com/view/python-sdk/SP-CAAAEE5

Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...