Getting Data In

How to index logs in Splunk 6.4 from a Box folder?

vasanthmss
Motivator

Hi Splunker,

Looking forward to onboarding logs from a Box folder. Not the Box access logs, it's a custom log file uploaded in box.

I can think of the below options,

  1. sync the box folder in the heavy forwarder and monitor the files. - Box provides ftp not sftp.
  2. write a script to download the files and add oneshot. - like curl .. this required to provide the password.

FYI : Linux environment with Splunk 6.4

My Questions are,

  1. which of the above options is good? I can see both are not suites security policy.
  2. is there any other better options?

Thanks,
V

1 Solution

jtacy
Builder

Not that I'm a big fan of FTP for new projects, but Box supports FTPS and that's probably the way I would go. You can find the connection information here:
https://community.box.com/t5/Managing-Your-Content/Using-Box-with-FTP/ta-p/312

View solution in original post

0 Karma

jtacy
Builder

Not that I'm a big fan of FTP for new projects, but Box supports FTPS and that's probably the way I would go. You can find the connection information here:
https://community.box.com/t5/Managing-Your-Content/Using-Box-with-FTP/ta-p/312

View solution in original post

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!