I'm looking at the Scheduled Export of Indexed Data (SEND) to File app from Splunkbase https://splunkbase.splunk.com/app/2914/ If I understand it as it stands - it is only going to try and write an alert output to a directory/file visible to the search head. I am looking for ways to push (scheduled search/alert) CSV to an SFTP location. And crucially, this will be from Splunk Cloud. Is this app a good way to do this? Would they basically just edit the sendfile.py to send to their sftp location and get that vetted as if it was their app? Please also comment how this approach differs from a scheduled search with script output. ... View more