Getting Data In

Splunk rest api change column order.


I am using splunk 4.2.5
When I export data to csv file from splunk via rest api I encountered a problem. Splunk change column order in csv file. How can I export data to csv with a certain column order?

Best regards, Vladimir.

Tags (1)

Splunk Employee
Splunk Employee

You can use the "table" command to set the desired order, even of an existing CSV file.

|inputlookup file.csv | table field1, field2, foo, bar | outputlookup file.csv

It should now have the order you specified in the table command.

0 Karma