When I search for my events by giving index=myindex, I get my data in the proper format.
But when i try to print it out in a table, by using "index=myindex | table _raw" the formatting changes and I get the data in a different format.
How can get output of "table _raw" in the same way as events display in default search page.
Can it be done at query level or HTML or CSS level ?
Thanks in advance for your help.
you cant
"The table command is similar to the fields command in that it lets you specify the fields you want to keep in your results. Use table command when you want to retain data in tabular format."
http://docs.splunk.com/Documentation/Splunk/7.1.2/SearchReference/Table
the list display shows events collapsed, you might be missing key information. I don't see a good reason to print this display
can you post a screenshot of what you are trying to achieve as well as a sample log?
you cant
"The table command is similar to the fields command in that it lets you specify the fields you want to keep in your results. Use table command when you want to retain data in tabular format."
http://docs.splunk.com/Documentation/Splunk/7.1.2/SearchReference/Table
the list display shows events collapsed, you might be missing key information. I don't see a good reason to print this display