How may I automatically generate a file on an on-prem server from the results of a search query
I'll give it a shot Yann, thanks.
it seems easier to do the opposite :
- ask for your splunkd port to be opened on splunk cloud
- then use a REST api to run a remote search from on-prem against splunkcloud search-head, and output the result in a file.
see https://docs.splunk.com/Documentation/Splunk/latest/Search/SearchwithSplunkWeb,CLI,orRESTAPI
