outputtext
This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6 , 4.0.7 , 4.0.8 , 4.0.9 , 4.0.10
outputtext
Synopsis
Outputs the raw text (_raw) of results into the _xml field.
Syntax
outputtext [usexml=bool]
Arguments
- usexml
- Datatype: <bool>
- Description: If usexml is set to true (the default), the _raw field is xml escaped.
Description
Rewrites the _raw field of the result into the _xml field. If usexml is set to true (the default), the _raw field is xml escaped.
Examples
Example 1: Output the "_raw" field of your current search into "_xml".
... | outputtext