Getting Data In

How to forward extracted data from Splunk to 3rd party?

thamohit
New Member

I have a requirement where I will be getting logs from various sources in Splunk, extract some useful information from it and then again I need to forward that extracted information to a 3rd party. I've been able to collect the logs and extract information from it but I want to know how can I forward that extracted information to 3rd party.

0 Karma

DalJeanis
SplunkTrust
SplunkTrust

Depending on the need, you can extract to a csv file and transmit, or create a search that generates an email with data inline or attached. You could also generate a REST call and POST the data somewhere, or a hundred other things.

When deciding on your solution, be sure to consider the type of data that is in your report. If the data is at all confidential, then you need to be transmitting in a secure way, which would argue for something other than a clear text email.

0 Karma

thamohit
New Member

I don't want the report to be transmitted. I just want to extract some fields from the original log and then forward it to the 3rd party. Forwarding can be in syslog format.

0 Karma

micahkemp
Champion

What options are available to send the data to the 3rd party? Would it be enough to run reports that email csv files? Do you have to send specific bits of raw logs to them via syslog?

0 Karma

thamohit
New Member

Well forwarding the data in syslog format would be fine to 3rd party.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...