Hello,
I need to create a scheduled search on a search head and automatically export the results as a .csv file, then copy the file to an external share that is mapped to my Splunk server (Linux).
I was trying to use CLI splunk search. Ran the command:
splunk search "search string" > -format csv > /myshare/file_name.csv
This works super fine, can be added to crontab, but the problem is that it requires authentication. If I manually authenticate for the first time then add the search into crontab, it will ask for credentials again?
Otherwise, can you suggest any other methods of automatically exporting search results into a file, then copy a file to an external share?
Thanks a lot!
... View more