Splunk Search

How to send splunk events into ftp server

mvaradarajam
Path Finder

Hi All,

How to send splunk events into ftp server.based on scheduled time

Tags (2)
0 Karma

stocksltd
New Member

Is it possible to ftp a report to a FTP server?

0 Karma

Rocket66
Communicator

Hi!

1.) write a custom search command in python, which pushes events to the ftp.
Basics of writing a search command here:
http://docs.splunk.com/Documentation/Splunk/6.1.1/Search/Writeasearchcommand

2.) make a search with that command and store that as scheduled report.
eg.: index = * foo="bar" | customsearchcommandforftpupload

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!