topic How to index a Sharepoint document? in Getting Data In

How to index a Sharepoint document?

guimilare — Fri, 17 Mar 2017 13:50:10 GMT

Hello Splunkers.

Scenario: I have a timesheet on SharePoint.
I want to index the timesheet table in Splunk so I can create dashboards and reports about our activities.
How can I access the SharePoint and index the timesheet table?

Any ideas?

Regards,
GMA

Re: How to index a Sharepoint document?

woodcock — Fri, 17 Mar 2017 14:14:00 GMT

You might be able to make use of this app (you might have to modify it to make it work):

https://splunkbase.splunk.com/app/635/

Re: How to index a Sharepoint document?

guimilare — Fri, 17 Mar 2017 14:50:46 GMT

Hi woodcock,

is there any way to do this using a Web Service?

Re: How to index a Sharepoint document?

cmeerbeek — Fri, 17 Mar 2017 15:06:21 GMT

Looking at the following URL I think SharePoint Webservices or REST API are your best bet.
http://stackoverflow.com/questions/1665755/how-do-i-query-the-sharepoint-database

Re: How to index a Sharepoint document?

guimilare — Fri, 17 Mar 2017 16:00:25 GMT

I was giving GetWatchList a try...

My search is:

|getwatchlist https://company.sharepoint.com/sites/timesheet/_layouts/15/guestaccess.aspx?guestaccesstoken=q%2bTMThzFCRd0U7YhiOjale97bMNH%2b508Fi%2fa0qZIduo%3d&docid=2_1d573c365c3e24b7badbce30a6e355e15&rev=1 authUser="john.palmer@company.com.br" authPassword="John16"

But i get

command="getwatchlist", Error fetching watch list: HTTP Error 403: Forbidden

Any idea?

Re: How to index a Sharepoint document?

woodcock — Fri, 17 Mar 2017 18:17:04 GMT

Like I said, it is not a perfect fit and you will probably have to modify it. Maybe it will be easier to contact the app author and work directly with him.