Splunk report upload to a OneDrive link

[Chayan19]

How can I automate the process of exporting a Splunk report and uploading it to a OneDrive link? Does anyone have experience or suggestions on how to achieve this?

[livehybrid]

Hi @Chayan19 

Unfortunately I dont think there are any apps currently in Splunkbase to achieve this, as @PickleRick you might have some success with HTTP Alert Action - *however* I believe that the OneDrive API requires authentication using OAuth2.0 which I dont think you will be able to do with that approach. 

The only thing I can think of is using the "Export Everything" app which can send to "Azure Blob & Data Lake Object Storage" - From here you'd be within the Azure ecosystem so may be able to use a service account to push it to OneDrive via a function? Might become a little complicated though!

Other than that I think it'd need to be a custom Python alert action which would need developing.

Sorry I couldnt be of any more help!

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[PickleRick]

You could try to use HTTP Alert Action to push the report with HTTP REST API according to https://learn.microsoft.com/en-us/onedrive/developer/rest-api/api/driveitem_put_content?view=odsp-gr...

But I've never tried it myself.