Getting Data In

How Do you generate CSV File on Schedule basis (eg: Say at 6:00 AM) automatically to a file location

apandura
New Member
 
Tags (2)
0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

First, Schedule your report and end it with the ouputcsv command

sourcetype=foo | stats count by bar | outputcsv foobar.csv

Choose what time the report runs enable actions 'Run a Script'.

Write a script like this that moves them to the location of your choice

#!/bin/bash
NOW=$(date +"%m-%d-%Y")
OUTFILE="data.$NOW.csv"
mv $SPLUNK_HOME/var/run/splunk/foobar.csv /my/favorite/csv/hideway/OUTFILE

Upload the script to $SPLUNK_HOME/bin/scripts/
Specify the script in the scheduling options.

Relevant step-by-step documentation here

apandura
New Member

Our splunk installation is Managed services on AWS server. How can I get access to "$SPLUNK_HOME/bin/scripts/" directory? So I can get Script in that folder.

Thanks
AP

0 Karma

aljohnson_splun
Splunk Employee
Splunk Employee

Managed by some external party ? Talk to your administrator for SSH access:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AccessingInstancesLinux.html

Otherwise it would be a security vulnerability, right ?

0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...