How to index a Sharepoint document?

[guimilare]

Hello Splunkers.

Scenario: I have a timesheet on SharePoint.
I want to index the timesheet table in Splunk so I can create dashboards and reports about our activities.
How can I access the SharePoint and index the timesheet table?

Any ideas?

Regards,
GMA

[cmeerbeek]

Looking at the following URL I think SharePoint Webservices or REST API are your best bet.
http://stackoverflow.com/questions/1665755/how-do-i-query-the-sharepoint-database

[woodcock]

You might be able to make use of this app (you might have to modify it to make it work):

https://splunkbase.splunk.com/app/635/

[guimilare]

Hi woodcock,

is there any way to do this using a Web Service?

[guimilare]

I was giving GetWatchList a try...

My search is:

|getwatchlist https://company.sharepoint.com/sites/timesheet/_layouts/15/guestaccess.aspx?guestaccesstoken=q%2bTMT... authUser="[email protected]" authPassword="John16"

But i get

command="getwatchlist", Error fetching watch list: HTTP Error 403: Forbidden

Any idea?

[woodcock]

Like I said, it is not a perfect fit and you will probably have to modify it. Maybe it will be easier to contact the app author and work directly with him.