topic Splunk alerts logs: Where to see the logs generated by the Python Scrypt app? in Monitoring Splunk

Splunk alerts logs: Where to see the logs generated by the Python Scrypt app?

jdepedro — Mon, 28 Mar 2022 16:25:51 GMT

Hi all, good morning,

my first question on the community, as I have just started learning. So please be gentle if what I am asking is something obvious. 😉

I have configured an alert that executes two actions: send an email, and execute an customized app.

I'd like to know how to search the logs generated by the execution of the actions configured on this alert, specifically the logs generated by the app.

Could anyone please let me know where to see the logs generated by the app (python scrypt)?

Thanks in advance. Kind regards,

Juan

Re: Splunk alerts logs

gcusello — Mon, 28 Mar 2022 11:30:38 GMT

Hi @jdepedro,

at first I hint to add a third action: "Add to triggered alerts", so you can see your alert in the Splunk jobs.

Then, you can take the logs of the triggered alerts in _internal, as all Splunk logs.

About the python script, it depends on the script itself, but I'm not an expert of sctipting.

Ciao.

Giuseppe

Re: Splunk alerts logs

jdepedro — Mon, 28 Mar 2022 14:48:15 GMT

thanks a lot, gcusello. I have found out some of the information that I wanted.