topic Possible to use FTP Receiver with sftp protocol? in All Apps and Add-ons

Possible to use FTP Receiver with sftp protocol?

massit — Tue, 05 Apr 2022 21:57:09 GMT

Hi,
is it possible to use the SFTP protocol?
Regards

Re: FTP Receiver with sftp protocol

woodcock — Wed, 22 Mar 2017 14:45:04 GMT

If you mean to pull in data to the Indexers, then: No. You can however setup a Heavy Forwarder and build a script (make it atomic by pulling in files with a blacklisted suffix like *.tmp and then rename them once they are transferred) to use sftp to put the files where splunk is waiting for them. In such a case I use batch with sinkhole instead of monitor so that they get deleted as each is forwarded.

Re: FTP Receiver with sftp protocol

LukeMurphey — Wed, 22 Mar 2017 21:34:16 GMT

The FTP Receiver app doesn't support SFTP since that is entirely different protocol than FTP.

However, it can be made to support FTPS (FTP over SSL). If you want this, I could probably enable support for this in the app. Let me know if you want this.

Re: FTP Receiver with sftp protocol

LukeMurphey — Tue, 05 Apr 2022 21:38:27 GMT

I added SSL/TLS support in version 1.1.0.

The app will only support TLS/SSL if you install the necessary libraries (I cannot include them in the package since the files are platform specific). I include a setup.py script that you can run once to get the libraries installed; See the README for instructions.

Note that this isn't SFTP but rather FTPS. It is a little different than the original request but adds encryption support either way.