All Apps and Add-ons

Exporting Data from Splunk into Excel

daniellim
Explorer

Hello Splunk Community, I have come across a task whereby I am required to export data from splunk into excel, through rest api etc.

The Splunk ODBC Driver is not supported on Splunk platform versions 7.x. Upgrading your Splunk platform to 7.x can cause breaking changes to the Splunk ODBC Driver.

As this option is not viable due to it being discontinued, I would like to find out other options besides using the ODBC driver.

After much searching, I think the closest solution is VBA.

So my question would be - Are there any simple templates or guides for VBA to do this?

I need to authenticate with splunk, pull data through rest, and lastly populate the excel cells.

Looking forward to suggestions. Thanks!

0 Karma

inventsekar
SplunkTrust
SplunkTrust

As said on the above answer, we can use outputcsv command to export the splunk events to a CSV file , then, which can be easily imported into excel.

Any splunk search results, report/alert/dashboard can be saved as CSV file, then imported to excel.

As you are a member here at splunk answers, just thought to update you that, you can upvote any answers/comments and if any answers resolved your query, please "accept that as the answer", so that question will move from unanswered queue to answered queue.

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

jgbricker
Contributor

Depending on your requirements this may not be an option but thoight I’d point out that there is an outputcsv command.

https://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Outputcsv

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...