topic Re: How to get SharePoint excel files in to Splunk? in Splunk Search

How to get SharePoint excel files in to Splunk?

kiran331 — Mon, 12 Dec 2016 15:43:52 GMT

What is the best practice to get the SharePoint excel files, which will be added every week to get in to Splunk as lookups?

Re: How to get SharePoint excel files in to Splunk?

nabeel652 — Tue, 29 Sep 2020 12:08:59 GMT

The best way is to pull the SharePoint list through a PowerShell Script and ingest in Splunk and schedule it through your heavy/light forwarder. Send the XML query that will look like this:
-- snip
< List>
< Query>
< Where>
< And>
< Geq>
< FieldRef Name='EventDate'/>
< Value Type='DateTime'>
< Today/>
< /Value>
< /Geq>
< Leq>
< FieldRef Name='EventDate'/>
< Value Type='DateTime'>
< Today OffsetDays='+30'/>
< /Value>
< /Leq>
< /And>
< /Where>
< /Query>
< /List>
-- endsnip

Use GetSPList command in Powershell to send the query and receive the results. You may need to install SPClient_x64 or SPClient_x86 based on your system. Cheers

Re: How to get SharePoint excel files in to Splunk?

user1 — Thu, 10 Nov 2022 13:55:03 GMT

Hi, I am a novice user and I need my dashboard to take the data from an excel that is in sharepoint, could you send a sample script? What are the steps to incluye it in splunk?

Thank you very much

Re: How to get SharePoint excel files in to Splunk?

vinod743374 — Mon, 29 Apr 2024 05:35:06 GMT

Hi @user1

I do have the same requirement, Did you find the Solution for it.

Can you Please share the details about it.

Thanks in Advance.