Reporting

How to export large volume of raw data out of a index.

clyde772
Communicator

Is there a way to export large volume of raw data out of an index?

There seems to be a limit of 10000 lines. outputcsv seems to do it ok in csv format, but is there outputtext which allows unlimited raw data exports?

Thanks

Tags (3)

David
Splunk Employee
Splunk Employee

If you're using Splunk 6, you can also accomplish this with the new dump command, which may be more easier / more managed.

ziegfried
Influencer

You could do this in the command-line:

splunk search "sourcetype=syslog" -preview 0 -maxout 0 -output rawdata > out.log
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!