https://community.splunk.com/t5/Getting-Data-In/How-to-grab-data-from-a-the-search-result-for-an-API-call-script/m-p/341098#M62879 <P>Splunk passed 8 arguments to alert script, 8th one is the full path to the compressed result file of the search. How is your python script grabbing the specific fields?</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/7.0.3/Alert/Configuringscriptedalerts#Access_arguments_to_scripts_that_are_run_as_an_alert_action">https://docs.splunk.com/Documentation/Splunk/7.0.3/Alert/Configuringscriptedalerts#Access_arguments_to_scripts_that_are_run_as_an_alert_action</A></P> Wed, 18 Apr 2018 20:13:16 GMT somesoni2 2018-04-18T20:13:16Z https://community.splunk.com/t5/Getting-Data-In/How-to-grab-data-from-a-the-search-result-for-an-API-call-script/m-p/341097#M62878 <P>I have a job that is set to run off of every alert. I have a python script executing that is showing Exit Code 0. The script is designed to grab a specific field from the alert and pass it along with an API call to a web server. </P> <P>I am not seeing any errors other than it does not seem to be grabbing the file information from the search results.</P> <P>Any help here would be great</P> Wed, 18 Apr 2018 16:22:28 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-grab-data-from-a-the-search-result-for-an-API-call-script/m-p/341097#M62878 Athildjax64 2018-04-18T16:22:28Z https://community.splunk.com/t5/Getting-Data-In/How-to-grab-data-from-a-the-search-result-for-an-API-call-script/m-p/341098#M62879 <P>Splunk passed 8 arguments to alert script, 8th one is the full path to the compressed result file of the search. How is your python script grabbing the specific fields?</P> <P><A href="https://docs.splunk.com/Documentation/Splunk/7.0.3/Alert/Configuringscriptedalerts#Access_arguments_to_scripts_that_are_run_as_an_alert_action">https://docs.splunk.com/Documentation/Splunk/7.0.3/Alert/Configuringscriptedalerts#Access_arguments_to_scripts_that_are_run_as_an_alert_action</A></P> Wed, 18 Apr 2018 20:13:16 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-grab-data-from-a-the-search-result-for-an-API-call-script/m-p/341098#M62879 somesoni2 2018-04-18T20:13:16Z https://community.splunk.com/t5/Getting-Data-In/How-to-grab-data-from-a-the-search-result-for-an-API-call-script/m-p/341099#M62880 <P>This is not a run a script function, but a modular alert so it is part of an app.<BR /> in the alert_actions.conf file I have tried calling a $result.$ to add it as an argument, creating a param.message using the same filed and calling that from in the script. <BR /> None work.</P> Wed, 18 Apr 2018 21:55:47 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-grab-data-from-a-the-search-result-for-an-API-call-script/m-p/341099#M62880 Athildjax64 2018-04-18T21:55:47Z