Can I run a CLI search that will output the results to a file in json format?
Thanks,
Joe
Hi @zsbbb,
You can export any search output as json using below sample;
curl -k -u admin:changeme https://localhost:8089/services/search/jobs/export -d search="search sourcetype=access_* earliest=-7d" -d output_mode=json -o /path/to/local/file.json
Coming soon to a Splunk version near you, watch the release notes...