Reporting

How to export large volume of raw data out of a index.

clyde772
Communicator

Is there a way to export large volume of raw data out of an index?

There seems to be a limit of 10000 lines. outputcsv seems to do it ok in csv format, but is there outputtext which allows unlimited raw data exports?

Thanks

Tags (3)

David
Splunk Employee
Splunk Employee

If you're using Splunk 6, you can also accomplish this with the new dump command, which may be more easier / more managed.

ziegfried
Influencer

You could do this in the command-line:

splunk search "sourcetype=syslog" -preview 0 -maxout 0 -output rawdata > out.log
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...