Appreciate this is old but I found it when looking for an answer to my problem... may help someone? Incidentally my solution maxxed out at 10k rows. Believe that to be amendable in config but i havent access to do that myself on the installation I'm reporting from. ... View more

I have a working solution! Only 8 years late but hopefully might help someone... the issue is with stats and values. This works: dedup IMSI | table IMSI Replace IMSI with whatever your field is. Should handle multiple fields. And the resulting CSV has one entry per line as god intended. ... View more

I also tried the rex solution above. But still get my output csv file looking like this (same as without it): values(IMSI) 234301300000115 234301300000726 234301300000809 234301300001152 234301300001211 234301300001290 234301300001629 234301300001733 234301300001747 All on one line, no newlines between records. Useless as a csv file therefore. Probably something to do with using values and only one item output per line? not sure... ... View more

I've just run across this problem when trying to output a list of unique values from a set of log files. The csv for some reason by default has 3 values per line in the resulting output! Bit silly. For a csv separate values by commas, newline for next record. Standard! I would suggest this is a bug with Splunk and been there for over 5 years! Surprised... Anyway I've just tried the work around of appending a newline after each value as suggested by martinaire above... but that doesn't work for me. My emailed report just has \n's after each value. I'm at the moment stuck at running the thing manually myself and copy and pasting the output rows. Splunk output in web browser looks like this: Values(IMSI) 234301300000115 234301300000726 234301300001152 234301300001211 234301300001290 234301300001629 234301300001733 etc. But in csv file emailed to me I have this: values(IMSI) 234301300000115\n 234301300000726\n 234301300001152\n 234301300001211\n 234301300001290\n 234301300001629\n 234301300001733\n 234301300001747\n 234301300001823\n 234301300001851\n 234301300001944\n 234301300002254\n Hopefully there's a better way to do it? Will look at the other suggestions above ... View more