
Export data using the dump command
You can use the dump
search command to export large collections of events onto a local disk. You can use this command with the CLI, Splunk SDK, and Splunk Web.
The basic syntax of the dump
command is:
dump basefilename=<string> [rollsize=<number>] [compress=<number>] [format=<string>] [fields=<comma-delimited-string>]
The <format>
is the data format of the dump file that you are creating. Your format options are raw
, csv
, tsv
,xml
, and json
.
For search examples and full explanations of the required and optional arguments, see the dump
command in the Search Reference.
PREVIOUS Export data using the Splunk SDKs |
NEXT Forward data to third-party systems |
This documentation applies to the following versions of Splunk Cloud™: 6.6.3, 8.0.0, 7.0.8, 7.0.0, 7.0.2, 7.0.3, 7.0.5, 7.0.11, 7.1.3, 7.1.6, 7.2.3, 7.2.4, 7.2.6, 7.2.7, 7.2.8, 7.2.9
Feedback submitted, thanks!