topic Re: How do you send a Splunk report to a network drive? in Getting Data In

How do you send a Splunk report to a network drive?

arock — Wed, 30 Jan 2019 19:02:59 GMT

Hello,

I have a user wanting to send a Splunk report (.csv) to a network drive. I read your post on "Trigger a PDF via the command line". I believe my particular task is a little different but follows the same concept.

Can you kindly provide some guidance?

Much Appreciated,
Cheers!!!

Re: How do you send a Splunk report to a network drive?

dkeck — Wed, 30 Jan 2019 21:01:07 GMT

Hi
Have you seen this post?

https://answers.splunk.com/answers/1295/how-do-i-make-a-report-save-to-a-share-on-a-different-server-every-24-hours.html

Re: How do you send a Splunk report to a network drive?

arock — Wed, 30 Jan 2019 22:16:19 GMT

I have not but will give it a read, thank you.

Re: How do you send a Splunk report to a network drive?

woodcock — Wed, 13 Feb 2019 05:59:13 GMT

The way that I do it is to come up with a file-name-prefix convention (like CopyMeToDriveF_) and then use | outputcsv CopyMeToDriveF_whatever.csv on the end of your search. Then you have to setup a cron or powershell job to do: cp $SPLUNK_HOME/var/run/dispatch/splunk/CopyMeToDriveF* F: or similar.

Re: How do you send a Splunk report to a network drive?

woodcock — Thu, 11 Apr 2024 19:23:55 GMT

A better way to do this is to use the "Run a Script" alert action (after you create a script to do the copy). Yes, this alert action is deprecated but I use it often and there is no way that Splunk will be removing it from the product.