Suren
@suren Active 9 years, 4 months ago
index=* | reverse | fields index, host, source, sourcetype, _raw
Use above query over time to generate events from a Splunk environment and to take them for offline usage. more details are available at
“http://blogs.splunk.com/2013/09/15/exporting-large-results-sets-to-csv/”
“https://github.com/coccyx/eventgen” View
