Dashboards & Visualizations

How to get SharePoint list data into splunk using owssvr.dll

walkerhound
Path Finder

I realize this question has been asked before, but I don't see an answer.

Here is what I do in QlikView. It uses owssvr.dll.
If I browse to https://review.pcapp.bsii.....com/PMO/_vti_bin/owssvr.dll?Cmd=Display&RowLimit=0&List={5c534761-0fea...

I get an xml file, which I can't attach due to lack of Karma Points.

In QlikView, this is what I do:
LOAD ows_Team_x0020_Name as TeamName,
date(ows_Date,'YYYY-MM-DD') as MeetingDate,
ows_Number_x0020_of_x0020_Members as NumberOfMembers,
ows_Number_x0020_of_x0020_Members_x0 as MembersAttending,
ows_Percent_x0020_of_x0020_Members_x as PercentAttending,
ows_Number_x0020_of_x0020_Vistors_x0 as NumberOfVisitors,
ows_Shift_x0020_Workers_x0020_Unable as ShiftUnable,
ows_Secial_x0020_Event as SpecialEvent,
1 as RealDate
FROM https://review.pcapp.bsii.bechtel.com/PMO/_vti_bin/owssvr.dll?Cmd=Display&RowLimit=0&List={5c534761-...;

Tags (1)
0 Karma

Richfez
SplunkTrust
SplunkTrust

If you have the Sharepoint list as XML, you should be able to create an input to get it into Splunk.

If you need a way to schedule and automate it, or to retrieve it from a *nix machine, you can use wget. I had this specific problem recently and figured out at least one way to do this. I wrote it up as an answer for "Sharepoint list into Splunk", but basically it's just building a url from various pieces in the connection information (e.g. from when you dump a test copy into Excel), then wrapping that url into a wget and scheduling it via cron.

I don't document the scheduling of it, it's just cron - much information is available elsewhere. An enterprising person could create it as a modular input and let Splunk handle scheduling. I haven't gotten that far yet. 🙂

https://answers.splunk.com/answers/236497/sharepoint-list-into-splunk.html

manderson7
Contributor

This did great for me, thank you!

0 Karma

Richfez
SplunkTrust
SplunkTrust

You are welcome!

0 Karma

manderson7
Contributor

So were you able to figure out how to download multiple pages? I can't see anything in the guid/url that displays a page, or else I'd iterate the wget command.

any help you can provide would be great.

0 Karma

Richfez
SplunkTrust
SplunkTrust

Have you found out how to handle this?

If you have an XML file, could you just use that as an XML input to Splunk?

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...