Reporting

How can I download search results as an encrypted file ?

sunrise
Contributor

Hi Splunkers,

I know that we can export the search results as CSV, raw format, etc..
and use ssl protocol to Splunk web.

But I want to get the search results as an encrypted file.
Is there any idea to encrypt those file to download an encrypted file ?

Thank you for your help.

Tags (2)
0 Karma
1 Solution

Ayn
Legend

There's no such functionality by default, in part because - how would you implement it and what would be the use-case? Do you want a CSV inside an encrypted zip file, and if so, what password would you use? If you use the same password for everyone that's a secret that's then shared by everyone and essentially no longer a secret, really.

Splunk can be extended in all kinds of crazy ways, so you could write your own REST API endpoint that takes the results, encrypts it in some way and returns the encrypted results. I'm still not sure why you would want to do that but with some effort you could implement it if you wanted.

View solution in original post

Ayn
Legend

There's no such functionality by default, in part because - how would you implement it and what would be the use-case? Do you want a CSV inside an encrypted zip file, and if so, what password would you use? If you use the same password for everyone that's a secret that's then shared by everyone and essentially no longer a secret, really.

Splunk can be extended in all kinds of crazy ways, so you could write your own REST API endpoint that takes the results, encrypts it in some way and returns the encrypted results. I'm still not sure why you would want to do that but with some effort you could implement it if you wanted.

sunrise
Contributor

Thank you, Ayn.
Now I consider to make the compress button which call to system command in python.

Get Updates on the Splunk Community!

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: https://bsidessplunk.com CFP Site: https://bsidessplunk.com/cfp CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...