Reporting

How to export large volume of raw data out of a index.

Communicator

Is there a way to export large volume of raw data out of an index?

There seems to be a limit of 10000 lines. outputcsv seems to do it ok in csv format, but is there outputtext which allows unlimited raw data exports?

Thanks

Tags (3)

Splunk Employee
Splunk Employee

If you're using Splunk 6, you can also accomplish this with the new dump command, which may be more easier / more managed.

Influencer

You could do this in the command-line:

splunk search "sourcetype=syslog" -preview 0 -maxout 0 -output rawdata > out.log
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!