I am using splunk 4.2.5
When I export data to csv file from splunk via rest api I encountered a problem. Splunk change column order in csv file. How can I export data to csv with a certain column order?
Best regards, Vladimir.
You can use the "table" command to set the desired order, even of an existing CSV file.
|inputlookup file.csv | table field1, field2, foo, bar | outputlookup file.csv
It should now have the order you specified in the table command.