https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-script-using-Powershell-to-run-and-pull-logs/m-p/325252#M60498 <P>Hi,<BR /> I was wondering if an event was to occur for a piece of hardware such as changing, going down etc. is it possible to use Powershell create a script to run and pull logs from Splunk and export them to a file. </P> <P>Thanks.</P> Tue, 10 Apr 2018 09:34:44 GMT mdeer 2018-04-10T09:34:44Z https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-script-using-Powershell-to-run-and-pull-logs/m-p/325252#M60498 <P>Hi,<BR /> I was wondering if an event was to occur for a piece of hardware such as changing, going down etc. is it possible to use Powershell create a script to run and pull logs from Splunk and export them to a file. </P> <P>Thanks.</P> Tue, 10 Apr 2018 09:34:44 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-script-using-Powershell-to-run-and-pull-logs/m-p/325252#M60498 mdeer 2018-04-10T09:34:44Z https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-script-using-Powershell-to-run-and-pull-logs/m-p/325253#M60499 <P>not exactly sure what you would like to achieve here.<BR /> can you elaborate?<BR /> how would you know a piece of hardware is down?<BR /> does that piece reports to splunk and you want the data from some point in time until the moment it was down?<BR /> you can leverage splunk internal capabilities and write an alert / saved search to trigger on the needed condition. from there you can export results to file, send email, execute scripts and more...</P> Tue, 10 Apr 2018 13:20:23 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-create-a-script-using-Powershell-to-run-and-pull-logs/m-p/325253#M60499 adonio 2018-04-10T13:20:23Z