Reporting

How to automate secure copy (SCP) saved search results on ServerA to ServerB?

tkwaller
Builder

Hello

I am trying to figure out how I can do this:
I have a saved search that runs on server A and I want to automate secure copy (scp) those results to server B. How can I accomplish this? All I want to do is simply scp the results from one folder to a different folder on a different server.

Any ideas on how I can do this?

Thanks for the assistance!

0 Karma
1 Solution

Yasaswy
Contributor

Hi, There are multiple ways you can do this. You are essentially running a command on a schedule... if you want to go the SCP route. Set up the access via SSHKeys and you can either use crond, or any scheduler even splunk scheduler or a script .

scp -r serverA/ user@serverB:/destination

Taking a guess at what you are trying to do, it might be better just to use a mapped/mounted drive that can be accessed from both locations.

View solution in original post

0 Karma

Yasaswy
Contributor

Hi, There are multiple ways you can do this. You are essentially running a command on a schedule... if you want to go the SCP route. Set up the access via SSHKeys and you can either use crond, or any scheduler even splunk scheduler or a script .

scp -r serverA/ user@serverB:/destination

Taking a guess at what you are trying to do, it might be better just to use a mapped/mounted drive that can be accessed from both locations.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...