We have a requirement to send Splunk processed data as a CSV to 3rd party system. Currently the csv file is sent in email, but they want it to be kept into a shared location (or folder) where Control-M or similar batch processing system can move the file for other purposes.
My understanding from Splunk for sending to 3rd party or exporting is
(a) Could send as [syslog to externa][1]l system (But that will be events)
(b) Could send as alerts (again events)
(c) Could send CSV file but as email attachment
Is there an option to do option (c) like an export/dump into an external filesystem? Have anyone tried this or have done a custom output export script?
[1]: https://docs.splunk.com/Documentation/Splunk/8.0.3/Forwarding/Forwarddatatothird-partysystemsd
↧