Reporting

How to export search results - csv output to a sharepoint location

p_basanth
New Member

Hi, I have created a saved search and scheduled it to run weekly basis.
Any pointers on how to export the results in a csv and send it to sharepoint location.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

You could write an alert script that connects to sharepoint and sends the results, and have that script triggered by your weekly scheduled report.

somesoni2
Revered Legend

Agree with @martin_mueller. Have your scheduled search run an "exportcsv" command in the end and the exported csv file will be created in $SPLUNK_HOME/var/run/splunk folder. Later configure an alert executing script to either push directly to sharepoint (using some API) or copy it to sharepoint's shared location.

Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...