Reporting

How to export search results - csv output to a sharepoint location

p_basanth
New Member

Hi, I have created a saved search and scheduled it to run weekly basis.
Any pointers on how to export the results in a csv and send it to sharepoint location.

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

You could write an alert script that connects to sharepoint and sends the results, and have that script triggered by your weekly scheduled report.

somesoni2
Revered Legend

Agree with @martin_mueller. Have your scheduled search run an "exportcsv" command in the end and the exported csv file will be created in $SPLUNK_HOME/var/run/splunk folder. Later configure an alert executing script to either push directly to sharepoint (using some API) or copy it to sharepoint's shared location.

Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...