While working with Splunk, I’ve come across unique requests that are specific to an organization. In some cases, Splunk customers within an organization do not have Splunk access to run their own saved searches and reports. This requires the Splunk team to create the saved search, generate the report, and send the report to the Splunk customer. Splunk can send a report by email after the search is ran, but this option is not practical if a search runs multiple times a day. A better option would be to place the report on a server, accessible to the customer, every time the saved search is...
Automating File Transfer: Using Bash Scripts to Place Reports on Remote Servers
Posted by Krishan Patel
on Tuesday, March 15, 2016 - 09:49
Operational Intelligence Splunk, file transfer, auth-key, scripting