CLI Search - Export JSON File?

[cramasta]

Can I run a CLI search that will output the results to a file in json format?
Thanks,
Joe

[scelikok]

Hi @zsbbb,

You can export any search output as json using below sample;

curl -k -u admin:changeme https://localhost:8089/services/search/jobs/export -d search="search sourcetype=access_* earliest=-7d" -d output_mode=json -o /path/to/local/file.json

[zsbbb]

New to splunk and bringing this back up - how does one do this? 

For context, I have a splunk container running on docker, and was hoping to translate the splunk index data into json using a cli search and saving the output as a local file.

Thanks!

[araitz]

Coming soon to a Splunk version near you, watch the release notes...