topic Re: Run a script on UF from SHC in Getting Data In

Run a script on UF from SHC

ishaanshekhar — Mon, 09 May 2016 07:05:23 GMT

Hi,

I have a few scheduled alerts setup on my SHC. The output is the list of hosts (UFs) that fall in the alert criteria.

I need my alert to also run a script on all the remote hosts (UFs) that fall in the alert criteria.

I understand we can have a script on the local SHC to call the remote script on UF using ssh. But I dont want to follow that route. I wish to have a script in an app on UF and have it run by SHC.

Is that possible directly? or through a rest endpoint? or any other technique?

Thanks
Ishaan

Re: Run a script on UF from SHC

jkat54 — Mon, 09 May 2016 13:46:10 GMT

Im afraid this exact requirement SHC to UF is not possible without the use of ssh or another command and control technique/software.

What if you put a script on the UF that queried the SHC, runs a search or reads a saved search/report, determines if the UF itself is in the list, and then executes the code. Make the script run on the UF every hour, etc.

Re: Run a script on UF from SHC

ishaanshekhar — Tue, 10 May 2016 14:10:47 GMT

Thanks @jkat54 .... but my irony is the actual data for the calculation of 'alert' condition is coming from the UFs themselves to the SHC.

If I were to put a script on the UFs to check on the SHC through REST endpoint, it would be easier to put a script that would check the data in question locally on UF rather than on SHC.

I was actually hoping for a REST end point to run a script in an app on UF, which I could call from the SHC.

Re: Run a script on UF from SHC

jkat54 — Tue, 10 May 2016 14:23:27 GMT

What is the criteria for your alert?

Re: Run a script on UF from SHC

ishaanshekhar — Tue, 10 May 2016 15:22:34 GMT

Things that are local to a UF server... such as disk space, process hung, memory, cpu increase etc.

The date comes from the UF to SHC, and the SHC is required to trigger a script on the UF for corrective action in case of threshold is met for any criteria.