topic Alert Script not running Splunk in Alerting

Alert Script not running Splunk

shilpi — Thu, 27 Jun 2013 01:43:34 GMT

I created an search query and I am trying to send an alert mail and run a script through splunk.
Though I get the alert mail, script does not seem to be executing.
I tried executing the default script "echo.sh" but its also not working.
If I execute "echo.sh", it works.
I have placed my script in $SPLUNKHOME/bin/scripts ( where echo.sh is present )
Please help

Re: Alert Script not running Splunk

adrianathome — Thu, 27 Jun 2013 01:48:03 GMT

Did you configure an email server?http://docs.splunk.com/Documentation/Splunk/5.0.3/Alert/Setupalertactions#Configure_email_alert_settings_in_Manager

I see that you ate getting the email, but script not running. Did you check permissions on script? Is it executable?

Also take a look at the python.log for more clues.

Have you looked at this?http://wiki.splunk.com/Community:TroubleshootingAlertScripts

Re: Alert Script not running Splunk

shilpi — Thu, 27 Jun 2013 18:12:46 GMT

Thanks for your reply.
Yes The script is executable and it run when executed manually.
I do not see any python.log in var/log.
Only logs present are splunkd.log and metrics.log.
I have already referred to the link provided by you but nothing seems to be working.
Please let me know in case you have any idea

Re: Alert Script not running Splunk

adrianathome — Fri, 28 Jun 2013 02:29:01 GMT

Log location should be $SPLUNK_HOME/var/log/splunk/

There should be a python.log file there.

The other thing is to make sure that you are using the python version that splunk will use. You can test this with the following command:
$SPLUNK_HOME/bin/splunk cmd python script.py

Re: Alert Script not running Splunk

Chinmai — Tue, 04 Apr 2017 11:37:27 GMT

Hello Shilpi,

Did you find the solution for this? Even I am facing the same problem.

Thanks in advance.