Share an analytics table with Open Sharing

Create an external sharing profile so that an authorized Delta Sharing client can read a Machine Data Lake analytics table.

  • Open Sharing is supported for your Splunk Cloud Platform environment and dataset type.

  • Your role includes the share_datasets_external capability and the required dataset access for the analytics table.

  • The analytics table that you want to share is available in the Catalog. If the external workflow needs data from a raw table, promote the required time range, filters, and fields to an analytics table first.

  • You know the authorized recipient or workflow, the required access duration, and the supported client that reads the shared table.

Use Open Sharing when a supported business intelligence tool, notebook, or machine learning workflow needs read-only access to a Machine Data Lake analytics table without a manual export. Open Sharing uses an external sharing profile that contains the Delta Sharing endpoint and bearer token for the selected table.

Important:

Treat the sharing profile as a secret. Do not include the profile, bearer token, profile secrets, or presigned URLs in support cases, troubleshooting notes, chat messages, or shared logs.

  1. From the global navigation bar in Splunk Cloud Platform, select the Catalog (Image of the "Catalog" icon) icon.
  2. On the Catalog page, select the Datasets tab.
  3. Select the analytics table that you want to share.

    Review the table name, schema, time range, and source data before you share it. Share only the analytics table that matches the authorized use case.

  4. Open the analytics table details, and then select the Manage tab.
  5. Set the profile expiration or access duration.

    Use the shortest duration that supports the external workflow. Expiration limits future access through the downloaded profile.

  6. Select Enable sharing.
  7. Select Download external sharing profile.

    The downloaded JSON profile includes values such as shareCredentialsVersion, endpoint, bearerToken, and expirationTime.

  8. Provide the sharing profile only to the authorized user, service, or workflow that needs to read the analytics table.
  9. Configure the supported Delta Sharing client with the sharing profile.

    For profile field details, see Open Sharing profile fields. For client examples, see Python and pandas Open Sharing example, Connect Power BI to an Open Sharing analytics table, and Connect Apache Spark to an Open Sharing analytics table.

  10. Read the shared table from the external client and validate that the returned fields and rows match the authorized analytics workflow.

    For the current Machine Data Lake sharing workflow, read the latest snapshot of the shared table. Do not depend on time travel, Change Data Feed, Delta table versions, or commit history unless Splunk documents support for those features.

  11. When the external workflow no longer needs access, let the profile expire or select Revoke sharing.

The supported external client can read the shared analytics table until the sharing profile expires or sharing is revoked. Expiration or revocation stops access through that profile, but it does not delete the analytics table or the promotion job that created it.

Review audit data where Open Sharing audit events are available. If a profile or bearer token is exposed, revoke sharing and create a new profile only when access is still authorized.