topic Re: Output scheduled searches' results to syslog? in Getting Data In

Output scheduled searches' results to syslog?

aaronpmcconnell — Wed, 26 May 2010 01:04:07 GMT

I'm trying to output an alert via syslog to our Orion server. Any suggestions on how to do that?

Re: Output scheduled searches' results to syslog?

Mick — Wed, 26 May 2010 08:01:11 GMT

Get your scripting hat on, this isn't a feature Splunk can just do I'm afraid. Somebody out in the wide world may have done this already, but I've not specifically heard of it.

Re: Output scheduled searches' results to syslog?

lukeh — Wed, 26 May 2010 17:54:13 GMT

It can be done quite easily, an example is available in the admin manual: http://www.splunk.com/base/Documentation/latest/Admin/Configurescriptedalerts

Luke 🙂

Re: Output scheduled searches' results to syslog?

jtrucks — Tue, 10 Sep 2013 19:58:30 GMT

Launch a script on the splunk server. Have that script parse the results, format a syslog message, and send it via the logger command to syslog.