Can a scheduled report push data to a web server?

[dmacgillivray]

Hello Splunk,

I have a question about the process for web hooks. Looks like it is asynchronous, but can it push data to a web server? If so, how does that occur?

Trying to understand this as the end goal is to send monthly reports to a location outside of Splunk. The reports would link to a CSV, and be named with date and time in the name so that a month later, the same report would not overwrite the originals.

In some cases, the reports will be accessed months later. I have thought about data models and summary indexes, but that would take more time I believe than just sending them to a location for later access.

Any ideas would be greatly appreciated. If I missed an FAQ, feel free to forward me any information.

Thanks,
Daniel MacGillivray

[woodcock · Accepted solution]

The best way would be to schedule the report and have it send results "As PDF attachment" and then email it some where that has separate code to post the PDF to the website. I am sure there are plenty of CMS/tools already in existence that have the capability to auto-publish attachments when emailed to a particular address (I think I saw this in Drupal).

[dmacgillivray]

Hi Woodcock,

That makes sense. Thanks for that insight, I will check out that app.

-Daniel