Splunk Search

Data not coming in JSON format from Splunk Javascript sdk


I am querying Splunk using javascript SDK. In the searchParams, i have given the output mode as "json_rows".

var searchParams = {
    exec_mode: "normal",
    output_mode: "json_rows"

Any idea what is going wrong? I tried "json_cols" and only "json" also. Same result.

Thanks in advance.

0 Karma


The docs are not very clear on this so I'm not really sure, but have you tried capitals?

"output_mode: Specifies the output format of the results (XML, JSON, JSON_COLS, JSON_ROWS, CSV, ATOM, or RAW)." 


0 Karma
Get Updates on the Splunk Community!

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...