topic Access arguments to python script in Splunk Dev

Access arguments to python script

trungnt — Tue, 29 Sep 2020 12:23:45 GMT

Hi all,

I wrote a small python script to run "a script alert action", I access arguments by this follow guide,
http://docs.splunk.com/Documentation/Splunk/6.2.2/Alert/Configuringscriptedalerts#Access_arguments_to_scripts_that_are_run_as_an_alert_action

My python script is:

#!/usr/bin/python
#
import sys
import serial
import time

tn = sys.argv[4]

print tn

The script is running.

The arguments to scripts have SPLUNK_ARG_0 -> SPLUNK_ARG_8, but I want access other information,
for example: I want to tranfer arguments which is the same tokens $result.fieldname$ in email notifications.

Please help me,

Thank you!

Re: Access arguments to python script

somesoni2 — Tue, 29 Sep 2020 12:23:47 GMT

The search results are not directly accessible in the alert script but SPLUNK_ARG_8 argument provides the compressed file that contains the search result. Look at this post for a sample wrapper script on how to use 8th argument to pass search results to your script.

https://answers.splunk.com/answers/149836/how-to-run-an-alert-script-on-field-values-generated-in-splunk.html

Re: Access arguments to python script

trungnt — Wed, 18 Jan 2017 06:36:35 GMT

Hi, Somesoni2

Thank you so much for your speedy reply!
It 's working.