topic Methods to export reports in Reporting

Methods to export reports

rlautman — Wed, 10 Apr 2013 13:24:17 GMT

I am looking into the different methods that can be used to extract reports from Splunk - I have recently had a request from a team for whom I create a daily report on Splunk and mail to them. They are now asking that this report be automated (I have asked a question regarding this here) and that this automated report be forwarded to them to be used in an Information Tool via one of the following 3 methods:

Use a webservice to retrieve the report and place it in their tool
Send the report to a Sharepoint site for them to retrieve the information from
Send the report to a SQL server

Are these methods of extraction possible with Splunk? Or is there another method that anyone could suggest?

Re: Methods to export reports

jonuwz — Wed, 10 Apr 2013 15:02:51 GMT

Not out the box.

There's 2 options.

run a script when the saved search runs. One of the arguments is the location of the file that contains the results. Parse it, then send the results to wherever.
Write it all in python / java - there are SDKs that allow you to get data out of splunk. So you could periodically run this script / program to populate the other tool without relying on splunk to do the scheduling.

Re: Methods to export reports

rlautman — Wed, 10 Apr 2013 15:29:30 GMT

Great, thanks for the tips - could you recommend some SDKs so I can take a look?

Re: Methods to export reports

jonuwz — Wed, 10 Apr 2013 15:32:31 GMT

sdk overviews