<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How do you use Splunk to search within document text of wiki server and SharePoint data sources? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-do-you-use-Splunk-to-search-within-document-text-of-wiki/m-p/414074#M167122</link>
    <description>&lt;P&gt;Splunk does not have a web-crawler component, you would need to fetch all the documents from SharePoint through some means.&lt;/P&gt;

&lt;P&gt;Unfortunately, the Splunk Add-on for Microsoft Office 365 only fetches the audit logs for SharePoint, not the actual data. There may be some way to use the Splunk Add-on for Microsoft Cloud Services to fetch the data from Azure Storage Tables, but I am not 100% certain if SharePoint data is accessible via that means.&lt;/P&gt;

&lt;P&gt;It seems like the 'official' way is to use one of the methods described at &lt;A href="https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/sharepoint-net-server-csom-jsom-and-rest-api-index"&gt;https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/sharepoint-net-server-csom-jsom-and-rest-api-index&lt;/A&gt; to fetch the data, most likely the REST API. You would need to write a script to do the following:&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;Get a list of all documents, via &lt;A href="http://server/site/_api/lists"&gt;http://server/site/_api/lists&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;For each list, get all that lists items, via &lt;A href="http://server/site/_api/lists/getbytitle('listname')/items"&gt;http://server/site/_api/lists/getbytitle('listname')/items&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;Process each of those items and the metadata, and index that in Splunk.&lt;/LI&gt;
&lt;/UL&gt;

&lt;P&gt;This page probably describes the details of what you'll need to develop.&lt;BR /&gt;
&lt;A href="https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/get-to-know-the-sharepoint-rest-service"&gt;https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/get-to-know-the-sharepoint-rest-service&lt;/A&gt;&lt;/P&gt;</description>
    <pubDate>Thu, 11 Oct 2018 02:43:42 GMT</pubDate>
    <dc:creator>sduff_splunk</dc:creator>
    <dc:date>2018-10-11T02:43:42Z</dc:date>
    <item>
      <title>How do you use Splunk to search within document text of wiki server and SharePoint data sources?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-you-use-Splunk-to-search-within-document-text-of-wiki/m-p/414073#M167121</link>
      <description>&lt;P&gt;Is it possible to use Splunk as search engine that uses a wiki server and SharePoint as its data sources? It must search within document text for example the contents of the files in a SharePoint document library.&lt;/P&gt;

&lt;P&gt;The idea is to create a dashboard with a nice simple search interface that brings back the "articles"  highlighting the key term and filtering down based on certain functional or application name etc. &lt;/P&gt;</description>
      <pubDate>Wed, 10 Oct 2018 21:53:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-you-use-Splunk-to-search-within-document-text-of-wiki/m-p/414073#M167121</guid>
      <dc:creator>roseneric4</dc:creator>
      <dc:date>2018-10-10T21:53:07Z</dc:date>
    </item>
    <item>
      <title>Re: How do you use Splunk to search within document text of wiki server and SharePoint data sources?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-do-you-use-Splunk-to-search-within-document-text-of-wiki/m-p/414074#M167122</link>
      <description>&lt;P&gt;Splunk does not have a web-crawler component, you would need to fetch all the documents from SharePoint through some means.&lt;/P&gt;

&lt;P&gt;Unfortunately, the Splunk Add-on for Microsoft Office 365 only fetches the audit logs for SharePoint, not the actual data. There may be some way to use the Splunk Add-on for Microsoft Cloud Services to fetch the data from Azure Storage Tables, but I am not 100% certain if SharePoint data is accessible via that means.&lt;/P&gt;

&lt;P&gt;It seems like the 'official' way is to use one of the methods described at &lt;A href="https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/sharepoint-net-server-csom-jsom-and-rest-api-index"&gt;https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/sharepoint-net-server-csom-jsom-and-rest-api-index&lt;/A&gt; to fetch the data, most likely the REST API. You would need to write a script to do the following:&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;Get a list of all documents, via &lt;A href="http://server/site/_api/lists"&gt;http://server/site/_api/lists&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;For each list, get all that lists items, via &lt;A href="http://server/site/_api/lists/getbytitle('listname')/items"&gt;http://server/site/_api/lists/getbytitle('listname')/items&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;Process each of those items and the metadata, and index that in Splunk.&lt;/LI&gt;
&lt;/UL&gt;

&lt;P&gt;This page probably describes the details of what you'll need to develop.&lt;BR /&gt;
&lt;A href="https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/get-to-know-the-sharepoint-rest-service"&gt;https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/get-to-know-the-sharepoint-rest-service&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 11 Oct 2018 02:43:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-do-you-use-Splunk-to-search-within-document-text-of-wiki/m-p/414074#M167122</guid>
      <dc:creator>sduff_splunk</dc:creator>
      <dc:date>2018-10-11T02:43:42Z</dc:date>
    </item>
  </channel>
</rss>

