icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.
Log4Shell Vulnerability: Information and guidance for you. Get resources.

Accept License Agreements

This app is provided by a third party and your right to use the app is in accordance with the license provided by that third-party licensor. Splunk is not responsible for any third-party apps and does not provide any warranty or support. If you have any questions, complaints or claims with respect to this app, please contact the licensor directly.

Thank You

Downloading Splunk for Excel Export
SHA256 checksum (splunk-for-excel-export_204.tgz) 1661a201d7a620c5b6570bc49569262f24f2901f05c91fcc5ef6ac35c3b267bb SHA256 checksum (splunk-for-excel-export_203.tgz) da57d55f51b472d8a87ce69b8b5d148307310134c7edffb2793bbd92c629e85b SHA256 checksum (splunk-for-excel-export_202.tgz) 556d984e54f94ac3160a9211cfae28cc5e99531b5eb3ee7e63b087052122360f SHA256 checksum (splunk-for-excel-export_201.tgz) 9fc9422e09588ddcd02672141bef4e111bb0cae3da6106de7c50c7ec2e839e19 SHA256 checksum (splunk-for-excel-export_20.tgz) 69063441fff56cee849ebf6008b863a4e9d46dff1bea21e2303907884c7fb797 SHA256 checksum (splunk-for-excel-export_131.tgz) df9903c3c5400a10e42a447cc0e311b2aa48621a5ebb2db325cc8258c42b5d74 SHA256 checksum (splunk-for-excel-export_13.tgz) 83cccf97ec4c2d8dbf6150ebfea3cd0ff7186934e2c9cb8f3f2618303b9df4d3
To install your download
For instructions specific to your download, click the Details tab after closing this window.

Flag As Inappropriate


Splunk for Excel Export

This app has been archived. Learn more about app archiving.
This app is NOT supported by Splunk. Please read about what that means for you here.
The Splunk for Excel Export add-on provides a Splunk Web Module and Controller that work together to allow you to export Splunk results to Microsoft Excel Spreadsheets.


The Splunk for Excel Export app requires the following:

  • Splunk
    • version 4.3 and up
    • search head running Linux, Windows, or Mac OS X
  • Browser
    • latest versions of FireFox, Safari, Chrome, Internet Explorer


ExcelExport module:

  • The ExcelExport Module is included with the app that presents a modal dialogue to request an Excel export of up to 1,000,000 events per workbook (65,000 events per sheet)
  • After installing Splunk for Excel Export and restarting Splunk, any view in any app should be able to use the module to provide Excel export

Flashtimeline view with integrated Excel export:

  • An example view 'flashtimeline_excel' is provided with the app
    • After installing Splunk for Excel Export and restarting Splunk, this view is exported globally and available in all visible apps
    • Example:

Excel export controller:

  • The excel export controller allows the streaming export of Splunk events or results to Excel spreadsheets, usually via the ExcelExport module

Getting Started

To get started with the Splunk for Excel Export, download the app from Splunkbase and then restart Splunk.


  • Splunk for Excel Export is an add-on, intended for use in other Splunk apps and views
  • Splunk for Excel Export is provided on an as-is basis, and is to be considered a community-supported add-on



  • Do not attempt to integrate individual components of Splunk for Excel Export into your own app or add-on
  • Treat Splunk for Excel Export as a dependency for other apps and views that require the ability to export Splunk events or results to Excel

Third-Party Software

  • Splunk for Excel Export includes xlwt, which is a python module that facilitates writing to Excel spreadsheets and is distributed under the greater BSD license.

Getting Support

If you have a question about or problem with the app or have a suggestion for a future version, please use the "Ask a question" link rather than asking it in the review section below. The review section should be used to review the app and not to request support.

Known Issues

  • Exporting results with more than 256 distinct fields might result in imcomplete results or an error
  • When specifying which fields to export using the 'fields' command, '_raw' and '_time' fields will always be implicitly included
    • use the 'chart' command or specify ' | fields -_*' to work around the issue


  • 1.0
    • initial version
  • 1.1
    • SPL-46435 - encoding should be set to "utf-8" in controller excel.py
    • SPL-46513 - support streaming results up to 65535 rows/events
    • SPL-46436 - include example view 'flashtimeline_excel'
    • SPL-46437 - fix 'flashtimeline_excel' CSS based on Splunk version
  • 1.1.1
    • SPL-47298 - fix lame indentation error in excel.py
  • 1.2
    • SPL-46514 - support export of up to 1 million rows
  • 1.3
    • SPL-47761 - move author key under launcher stanza in app.conf to prevent typo message on restart
    • SPL-47333 - update module bgcolor to #EDEDE7 for 4.3 for flashtimeline_excel
  • 1.3.1
    • SPL-48074 - spurious comma breaks ExcelExport.js
  • 2.0
    • Support for asyncronous operation
    • Improved resilience and performance
  • 2.0.1
    • Fixed bug with SSL error handling
  • 2.0.2
    • Fixes for REST API change (SPL-58975)
  • 2.0.3
    • Compatibility with Splunk Enterprise 6.0
    • Improved download experience


  • 3.0
    • Improved export and download experience
    • Excel report builder
    • Excel calls to action included in standard views by default

Release Notes

Version 2.0.4
Jan. 6, 2014

This is a bug-fix release to resolve a compatibility issue with Windows 2008.

Version 2.0.3
Nov. 5, 2013

This release is now compatible with Splunk 6.

Performance Enhancements:
- Exports now start downloading immediately instead of waiting for the full Excel workbook to be generated on the server.

Version 2.0.2
Jan. 10, 2013

Version 2.0.2 - Fix to account for 5.0 REST API change (SPL-58975)

Version 2.0.1
May 14, 2012

Fixed bug in SSL error handling

Version 2.0
May 13, 2012
  • improved performance, reliability, scale
Version 1.3.1
Feb. 9, 2012

SPL-48074 - spurious comma breaks ExcelExport.js

Version 1.3
Feb. 6, 2012

SPL-47761 - move author key under launcher
SPL-47333 - update module bgcolor to #EDEDE7 for 4.3 for flashtimeline_excel

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk Inc. in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.