https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-pull-data-from-SharePoint-to-Splunk/m-p/280867#M2291 <P>Thanks for the suggestion but we are not able to connect to SQL server in our environment. </P> Wed, 08 Jun 2016 18:53:40 GMT Anewec 2016-06-08T18:53:40Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-pull-data-from-SharePoint-to-Splunk/m-p/280865#M2289 <P>I needed to pull asset data from SharePoint to Splunk as a lookup table to feed into Splunk Enterprise Security. I looked at the Splunk add-on for SharePoint, but it's more for the integration of the SharePoint server. Any ideas on how to accomplish this? </P> Sat, 04 Jun 2016 23:48:51 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-pull-data-from-SharePoint-to-Splunk/m-p/280865#M2289 Anewec 2016-06-04T23:48:51Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-pull-data-from-SharePoint-to-Splunk/m-p/280866#M2290 <P>If you have items in lists in Sharepoint and would like to use them in Splunk and don't want the extra features of the Sharepoint app, I'd recommend using the <A href="https://splunkbase.splunk.com/app/2686/">Splunk DB Connect 2</A> app and build direct SQL queries to pull the information you'd like to have available. You can see the <A href="http://docs.splunk.com/Documentation/DBX/2.2.0/DeployDBX/AboutSplunkDBConnect">user documentation</A> for more information.</P> Sun, 05 Jun 2016 01:45:49 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-pull-data-from-SharePoint-to-Splunk/m-p/280866#M2290 Richfez 2016-06-05T01:45:49Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-pull-data-from-SharePoint-to-Splunk/m-p/280867#M2291 <P>Thanks for the suggestion but we are not able to connect to SQL server in our environment. </P> Wed, 08 Jun 2016 18:53:40 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-pull-data-from-SharePoint-to-Splunk/m-p/280867#M2291 Anewec 2016-06-08T18:53:40Z https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-pull-data-from-SharePoint-to-Splunk/m-p/280868#M2292 <P>Use Sharepoint's REST API to dump list data as XML and then index</P> <P><A href="https://mySPsite.com/sites/mySProot/_api/web/lists/getbytitle('MyListName')/Items">https://mySPsite.com/sites/mySProot/_api/web/lists/getbytitle('MyListName')/Items</A></P> <P>Then ingest into splunk and index</P> <P><A href="https://answers.splunk.com/answers/187195/how-to-add-and-parse-xml-data-in-splunk.html">https://answers.splunk.com/answers/187195/how-to-add-and-parse-xml-data-in-splunk.html</A></P> Wed, 20 Jul 2016 15:58:53 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/How-to-pull-data-from-SharePoint-to-Splunk/m-p/280868#M2292 kswart 2016-07-20T15:58:53Z