All Apps and Add-ons

Can I extract calendar events with this tool?

pdjhh
Communicator

Wondering if I can extract google calendar events and particularly the description field.

0 Karma
1 Solution

DavidHourani
Super Champion

Hi @pdjhh,

Seems like it based on the details in the documentation here : https://splunkbase.splunk.com/app/3791/#/details

If that doesn't work for you, you can build you own using google calendar API : https://developers.google.com/calendar

Cheers,
David

View solution in original post

0 Karma

pdjhh
Communicator

What I'm attempting to do is trawl through a bunch of calendar events, extract various fields and table those out looking for particular things that have or haven't been done, This is working (currently using data exported from calendars rather than getting ti with the api or the app) but I've come up against another issue. When I find an event where this particular action hasn't taken place then a report tells me of that. I then get that action done but am now wondering how can I update my data set with a field to flag that this task has been done. I'd like to write a new field that remaind within the data set after I've created it. Realis this isn't kinda how splunk works as the data has already been indexed when it got ingested by splunk but wondering if there's a way other that updating the original data then ingesting it again.

0 Karma

DavidHourani
Super Champion

Hi @pdjhh,

There are multiple solutions to store data in Splunk as a results from a search :
1- Summary indexing :
This can be done using the collect :https://docs.splunk.com/Documentation/Splunk/8.0.0/SearchReference/Outputlookup
Or via a scheduled search configured with summary indexing.
2- writing into a csv file :
This can be done using the outputlookup command
https://docs.splunk.com/Documentation/Splunk/8.0.0/SearchReference/Outputlookup
3- writing into a kv-store:
This can be done using the outputlookup command as well.

Have a read about those commands and how to use them and let me know if you need help implementing them!

Cheers,
David

0 Karma

pdjhh
Communicator

Thanks I'll have a look at using the api and feed back here.

0 Karma

DavidHourani
Super Champion

Hi @pdjhh,

Seems like it based on the details in the documentation here : https://splunkbase.splunk.com/app/3791/#/details

If that doesn't work for you, you can build you own using google calendar API : https://developers.google.com/calendar

Cheers,
David

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...