How to place splunk lookup table data output to a remote server?

[raj_mpl]

Hi All,

I had configured an alert with trigger action as Output results to lookup with replace option .
Since the alert will run every 1 hour , a .csv will get generated with the results right.

Now are there any ways to send that particular lookup file to an external location means to an external remote server location ?

Thanks in advance .

[adonio]

you can query splunk from your other machine
see here:
https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/ExportdatausingRESTAPI
And more in detail here:
https://docs.splunk.com/Documentation/Splunk/7.2.6/RESTTUT/RESTsearches#Get_search_results

hope it helps