topic Re: Excel Export in scheduled searches in All Apps and Add-ons

Excel Export in scheduled searches

dominiquevocat — Wed, 06 Feb 2013 09:20:20 GMT

Hm, how about using it in scheduled searches (like, using splunk for reports)?

Re: Excel Export in scheduled searches

araitz — Thu, 07 Feb 2013 00:27:01 GMT

I could implement something in the future that reports/alerts could use as a scripted alert action. Community: let me know if this would be useful.

Re: Excel Export in scheduled searches

dominiquevocat — Thu, 07 Feb 2013 09:13:44 GMT

Hi, well there is some preexisting codebase like the excel creator add-in and the OData one... spending some time to create a decent working excel output would be really really really useful.

Re: Excel Export in scheduled searches

michealrp — Thu, 06 Jun 2013 16:16:12 GMT

As there are limitations with the export to CSV to 10,000 events, an export to Excel from a scheduled search would be much more helpful, especially if it bypasses the 10,000 limit. Of course, this can be adjusted by changing the settings in the Splunk configurations manually, however, if you're an end user, without access to make changes to the code, you're out of luck if you need more than 10k lines exported currently.

Re: Excel Export in scheduled searches

michealrp — Thu, 06 Jun 2013 16:18:49 GMT

To add, as a network admin, gathering logs from over 2000 network devices, firewalls and name servers, our security department is all over logs from these things. They like to see who's requesting dns lookups, which ip's are coming into the firewall, attempting to break in, probes, etc. With Splunk and being able to provide geo data on which countries are trying to come into the network, etc, providing them an excel spreadsheet over a csv would be ideal.

Re: Excel Export in scheduled searches

kearaspoor — Wed, 19 Feb 2014 17:55:34 GMT

I agree. I work on a network with >100,000 endpoints and >80,000 users. There's currently no good way to get scheduled reports (CSV or PDF) that contains all the rows we normally need, automatically sent via the e-mail export function. I would be nice if the scheduling process would have a clean interface to request how many lines should be included at the time the e-mail is scheduled. In a perfect world the 'unlimited' option would be restricted based on user role, but I'd take the basic functionality without this if that's and extra complication.

Re: Excel Export in scheduled searches

andrey2007 — Mon, 30 Jun 2014 10:58:53 GMT

Yes, it would be great if splunk will send e-mail with excel report. May be during year something changed and it is possible now?

Re: Excel Export in scheduled searches

DanielFordWA — Fri, 25 Jul 2014 15:24:55 GMT

I agree this feature would be very useful to overcome the 10,000 csv report issue.

Re: Excel Export in scheduled searches

dominiquevocat — Mon, 28 Jul 2014 09:46:40 GMT

Folks interested might wanna try this small app: http://apps.splunk.com/app/1832/
hope ithelps

Re: Excel Export in scheduled searches

dominiquevocat — Mon, 19 Jan 2015 13:38:55 GMT

@andrey2007 check out the TA-XLS, hope it helps