Export all search results to CSV when search uses head

[rroyko]

I am trying to create a dashboard with a search that shows the top 10 entries but I also need to be able to export all the results

[asneed_eu]

The export option is underneath the time picker, and you should be able to choose csv.

You may want to filter your fields with the table command.

For example:
index=_internal | table source sourcetype event_message | head 10

Or, some other "transforming" command.

Ex:
index=_internal | top sourcetype