Is there a way to export large volume of raw data out of an index?
There seems to be a limit of 10000 lines. outputcsv seems to do it ok in csv format, but is there outputtext which allows unlimited raw data exports?
Thanks
If you're using Splunk 6, you can also accomplish this with the new dump command, which may be more easier / more managed.
You could do this in the command-line:
splunk search "sourcetype=syslog" -preview 0 -maxout 0 -output rawdata > out.log