
Export data using the dump command
You can use the dump
search command to export large collections of events onto a local disk. You can use this command with the CLI, Splunk SDK, and Splunk Web.
The basic syntax of the dump
command is:
dump basefilename=<string> [rollsize=<number>] [compress=<number>] [format=<string>] [fields=<comma-delimited-string>]
The <format>
is the data format of the dump file that you are creating. Your format options are raw
, csv
, tsv
,xml
, and json
.
For search examples and full explanations of the required and optional arguments, see the dump
command in the Search Reference.
PREVIOUS Export data using the Splunk SDKs |
NEXT Forward data to third-party systems |
This documentation applies to the following versions of Splunk Cloud Platform™: 8.2.2112, 8.2.2201, 8.2.2202, 8.2.2203, 9.0.2205, 9.0.2208, 9.0.2209 (latest FedRAMP release), 9.0.2303
Feedback submitted, thanks!