How to download the raw log files from splunk

Question

Where I work they just switched to splunk, but I just need the raw log file so I can work with it in notepad++ for debugging. So my question is can I get the raw log file from splunk, I don't need any of the "features" of splunk I just need the raw log files. So how can I get that.

Answer 1

Run index=<...> | fields _raw index=<...> | fields _raw

Then, you can export the files in CSV format. https://docs.splunk.com/Documentation/Splunk/latest/Search/ExportdatausingSplunkWeb

What do you need to do in notepad++ that you can't do in Splunk directly?