Splunk ITSI

export to csv file

friend444
Explorer

how to export entityid in csv file

I know the command is outputcsv

what is full command to extract value for specific field like entityid

0 Karma
1 Solution

woodcock
Esteemed Legend

Like this:

... | table entityid
| outputlookup YourOutputFileNameHere.csv

View solution in original post

0 Karma

woodcock
Esteemed Legend

Like this:

... | table entityid
| outputlookup YourOutputFileNameHere.csv
0 Karma

aberkow
Builder

I think you might want outputlookup https://answers.splunk.com/answers/275602/difference-between-outputlookup-and-outputcsv.html, but the syntax is pretty straightforward - you take the results of your search and then append an

|outputlookup csvName.csv command. If you only want to extract something like entityid, you can use a table command before hand to only have that field be sent over.

Does this answer your question?

0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...