How to export large volume of raw data out of a index.

[clyde772]

Is there a way to export large volume of raw data out of an index?

There seems to be a limit of 10000 lines. outputcsv seems to do it ok in csv format, but is there outputtext which allows unlimited raw data exports?

Thanks

[David]

If you're using Splunk 6, you can also accomplish this with the new dump command, which may be more easier / more managed.

[ziegfried]

You could do this in the command-line:

splunk search "sourcetype=syslog" -preview 0 -maxout 0 -output rawdata > out.log