
outputtext
Description
Outputs the contents of the _raw
field to the _xml
field.
The outputtext
command was created as an internal mechanism to render event texts for output.
Syntax
outputtext [usexml=<bool>]
Optional arguments
- usexml
- Syntax: usexml=<bool>
- Description: If set to true, the copy of the
_raw
field in the_xml
is escaped XML. Ifusexml
is set to false, the_xml
field is an exact copy of_raw
. - Default: true
Usage
The outputtext
command is a reporting command.
The outputtext
command writes all search results to the search head. In Splunk Web, the results appear in the Statistics tab.
Examples
1. Output the _raw field into escaped XML
Output the "_raw" field of your current search into "_xml".
... | outputtext
See also
PREVIOUS outputlookup |
NEXT overlap |
This documentation applies to the following versions of Splunk Cloud™: 7.0.13, 7.2.4, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 8.0.2006, 8.0.2007, 8.1.2008, 8.1.2009, 8.1.2011, 8.1.2012, 8.1.2101
Feedback submitted, thanks!