Splunk Enterprise Security

Export all search results to CSV when search uses head

rroyko
New Member

I am trying to create a dashboard with a search that shows the top 10 entries but I also need to be able to export all the results

0 Karma

asneed_eu
Path Finder

The export option is underneath the time picker, and you should be able to choose csv.

You may want to filter your fields with the table command.

For example:
index=_internal | table source sourcetype event_message | head 10

Or, some other "transforming" command.

Ex:
index=_internal | top sourcetype

0 Karma
Get Updates on the Splunk Community!

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...

Platform Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestIntroducing Splunk Edge Processor, simplified data ...