How to Send a report from Splunk Cloud Search head to Shared Network Drive?

[anandhalagaras1]

Hi All,

We have created multiple reports in our Splunk Cloud Search head  so once we schedule it we want the reports to reach a shared network drive so how can we get it enabled from our end.

[gcusello]

Hi @anandhalagaras1,

for my knowledge it isn't possible!

The only workaround to have the report on a filesystem is scheduling your report and sending it by eMail, then create s script that copies the file from the mail server to the Shared Network Drive or create a python script that runs your search on one your on premise server extracting the results of the report.

Ciao.

Giuseppe

[PickleRick]

Generally - you're right. But.

One coud try to come up with own scripting solution (using custom actions) to save the results to a network share (that would differ depending on whether we're talking Windows, MacOS or Linux here). But that would only work in an on-prem installation.

With cloud you could try to implement own solution pushing the results to a "network drive" in form of saving to a service like OwnCloud, Sharepoint and so on. But I don't think there is a ready-made solution for this.

[PickleRick]

What do you mean by "shared network drive" exactly?