Reporting

How can I download search results as an encrypted file ?

sunrise
Contributor

Hi Splunkers,

I know that we can export the search results as CSV, raw format, etc..
and use ssl protocol to Splunk web.

But I want to get the search results as an encrypted file.
Is there any idea to encrypt those file to download an encrypted file ?

Thank you for your help.

Tags (2)
0 Karma
1 Solution

Ayn
Legend

There's no such functionality by default, in part because - how would you implement it and what would be the use-case? Do you want a CSV inside an encrypted zip file, and if so, what password would you use? If you use the same password for everyone that's a secret that's then shared by everyone and essentially no longer a secret, really.

Splunk can be extended in all kinds of crazy ways, so you could write your own REST API endpoint that takes the results, encrypts it in some way and returns the encrypted results. I'm still not sure why you would want to do that but with some effort you could implement it if you wanted.

View solution in original post

Ayn
Legend

There's no such functionality by default, in part because - how would you implement it and what would be the use-case? Do you want a CSV inside an encrypted zip file, and if so, what password would you use? If you use the same password for everyone that's a secret that's then shared by everyone and essentially no longer a secret, really.

Splunk can be extended in all kinds of crazy ways, so you could write your own REST API endpoint that takes the results, encrypts it in some way and returns the encrypted results. I'm still not sure why you would want to do that but with some effort you could implement it if you wanted.

sunrise
Contributor

Thank you, Ayn.
Now I consider to make the compress button which call to system command in python.

Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...