- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
export Splunk data to template excel
Ave!
Is there any easy way to extract Splunk data into predefined (template) excel document?
I have a simple result table and I want, by simple click on button, export all data in table to predefined .xls worksheet to a specific location in document.
Thanks for help.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Does anyone successfully accomplish this ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Has anybody experience with Python's xlrd, xlwt and xlutils.copy? I am thinking of modifying Excel Export app by adding xlrd and xlutils.copy (since there is only xlwt) and then making some changes like this ...maybe it is not so difficult because I need a simple copy of template and insert results from table in Splunk to exact place in template.xls file in same table order as it is in Splunk..and then save it.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
A couple of ways I have done this in the past. We are currently using the automated option and is working for us. We are able to produce daily, weekly and monthly reports in Excel format using templates.
Manual
- Using the export option from the search bar (after the search has completed) or use a saved search where the CSV file is sent via e-mail.
- Dump the contents of the CSV file into the template you created and it will be mapped to display the data in the correct way. (Look up "excel link values")
OR
Automated
- Install a free mail server (hMail server).
- Point Splunk to send emails to the mail server.
- Attach a VBScript to the mail server to scan each email for a CSV attachment and save it.
- A VBScript is run on a CRON job to copy the CSV file to the Excel template (stored locally).
- The template you created will be mapped to display the data in the correct way. (Look up "excel link values")
- The file will be saved locally, but you could always configure it to be sent to an e-mail recipient.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
nice solution, but it is possible without too many other programs? Just Splunk and Excel maybe..
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Use the Excel Export app!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I am using Excel Export app already but I want that process of copy paste in template excel format to be automated..just by click on button it will retrieve a .xls document with results from Splunk in template format.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Exporting to a pre-defined template is actually something I have done for a few customers, but I haven't made the leap into making it a full blown feature.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Although it is may be used to help
1.simple click on button
(1) customize the Excel Export.
(2) And output to Excel using the API.
2.Other
(1)To create a VBA macro that captures data output by Excel Export.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Python SDK might be easiest because some EXCEL library in Python.
Good luck!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
pfiuu ... I see there is no easy way... let struggle
thanks for respond Hiroshi
