How to send splunk events into ftp server

[mvaradarajam]

Hi All,

How to send splunk events into ftp server.based on scheduled time

[stocksltd]

Is it possible to ftp a report to a FTP server?

[strive]

There are lot of examples available on internet.

http://www.pythonforbeginners.com/code-snippets-source-code/how-to-use-ftp-in-python
http://stackoverflow.com/questions/17438096/ftp-upload-files-python

http://effbot.org/librarybook/ftplib.htm

https://gist.github.com/slok/1447559

https://geonet.esri.com/thread/16333

http://love-python.blogspot.in/2008/02/ftp-file-upload.html

[Rocket66]

Hi!

1.) write a custom search command in python, which pushes events to the ftp.
Basics of writing a search command here:
http://docs.splunk.com/Documentation/Splunk/6.1.1/Search/Writeasearchcommand

2.) make a search with that command and store that as scheduled report.
eg.: index = * foo="bar" | customsearchcommandforftpupload