Can we send Splunk report to Unix server?

[vaishnab]

Hi Team,

I'm generating a report weekly and sending it across as an email.
However, the team wants this file to be pushed onto a directory on Unix server.

Any idea on how I can achieve this?

[gcusello]

Hi @vaishnab,

are you speaking of a csv file or a pdf?

if a csv, it's possible to save search results in a csv file but only in a folder of the Search Head: $SPLUNK_HOME/var/run/splunk/csv

Then you could schedule a script that moves it in another server.

I saw a people modifying the Splunk Python script that saves reports in a different folder but I'm not sure how to do this and I'ìd avoid.

Ciao.

Giuseppe

[vaishnab]

Hi @gcusello ,

      I am talking about csv file only if I create csv report on splunk and download it that csv file will not found on this path- $SPLUNK_HOME/var/run/splunk/csv
any configuration needed to save the csv file on this location?

[gcusello]

Hi @vaishnab,

how did you create this report, using outputcsv command?

the location I described is for this command.

Ciao.

Giuseppe