Scenario: I have a timesheet on SharePoint.
I want to index the timesheet table in Splunk so I can create dashboards and reports about our activities.
How can I access the SharePoint and index the timesheet table?
I was giving GetWatchList a try...
My search is:
|getwatchlist https://company.sharepoint.com/sites/timesheet/_layouts/15/guestaccess.aspx?guestaccesstoken=q%2bTMT... authUser="firstname.lastname@example.org" authPassword="John16"
But i get
command="getwatchlist", Error fetching watch list: HTTP Error 403: Forbidden