topic Re: Can we send Splunk report to Unix server in Deployment Architecture

Can we send Splunk report to Unix server?

vaishnab — Tue, 17 May 2022 15:03:04 GMT

Hi Team,

I'm generating a report weekly and sending it across as an email.
However, the team wants this file to be pushed onto a directory on Unix server.

Any idea on how I can achieve this?

Re: Can we send Splunk report to Unix server

gcusello — Tue, 17 May 2022 14:53:42 GMT

Hi @vaishnab,

are you speaking of a csv file or a pdf?

if a csv, it's possible to save search results in a csv file but only in a folder of the Search Head: $SPLUNK_HOME/var/run/splunk/csv

Then you could schedule a script that moves it in another server.

I saw a people modifying the Splunk Python script that saves reports in a different folder but I'm not sure how to do this and I'ìd avoid.

Ciao.

Giuseppe

Re: Can we send Splunk report to Unix server

vaishnab — Wed, 18 May 2022 14:11:27 GMT

Hi @gcusello ,

I am talking about csv file only if I create csv report on splunk and download it that csv file will not found on this path- $SPLUNK_HOME/var/run/splunk/csv
any configuration needed to save the csv file on this location?

Re: Can we send Splunk report to Unix server

gcusello — Wed, 18 May 2022 14:26:22 GMT

Hi @vaishnab,

how did you create this report, using outputcsv command?

the location I described is for this command.

Ciao.

Giuseppe