Splunk Enterprise Security

Export all search results to CSV when search uses head

rroyko
New Member

I am trying to create a dashboard with a search that shows the top 10 entries but I also need to be able to export all the results

0 Karma

asneed_eu
Path Finder

The export option is underneath the time picker, and you should be able to choose csv.

You may want to filter your fields with the table command.

For example:
index=_internal | table source sourcetype event_message | head 10

Or, some other "transforming" command.

Ex:
index=_internal | top sourcetype

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...