Splunk export csv only downloads 1GB data but search result shows more

[santosh121]

Is there any conf settings due to which even though i have bigger data size and search shows 33.5 lakh records only 1GB(somewhere around 20 lakh is getting downloaded) is getting downloaded.

csv - 1GB

json - 1gb

Regards,

Santosh

[Roy_9]

@santosh121 You can open a ticket to splunk support to enable REST access on your splunk cloud stack so that you can perform REST based search and export it to a csv

I had the same issue and sorted it out 

[s2_splunk]

Take a look here.