Hi,
When I execute my saved search in the CLI, the output columns are ordered differently than what I saw in Splunk Web, making the result undeliverable to my customer. The columns are - as was mentioned elsewhere - in alphabetical order, except the column that should be first is actually last. Is there a search parameter than I can supply in the CLI command line that will force the column order in my table clause to be honored?
| savedsearch -app -preview 0 -output csv -maxout 0
Thanks
↧
Why does my saved search in the CLI produce a different column order than the results in Splunk Web?
↧