How to index logs in Splunk 6.4 from a Box folder?

[vasanthmss]

Hi Splunker,

Looking forward to onboarding logs from a Box folder. Not the Box access logs, it's a custom log file uploaded in box.

I can think of the below options,

1. sync the box folder in the heavy forwarder and monitor the files. - Box provides ftp not sftp.
2. write a script to download the files and add oneshot. - like curl .. this required to provide the password.

FYI : Linux environment with Splunk 6.4

My Questions are,

1. which of the above options is good? I can see both are not suites security policy.
2. is there any other better options?

Thanks,
V

[jtacy · Accepted solution]

Not that I'm a big fan of FTP for new projects, but Box supports FTPS and that's probably the way I would go. You can find the connection information here:
https://community.box.com/t5/Managing-Your-Content/Using-Box-with-FTP/ta-p/312