topic Re: How to execute a mysql command over ssh script based on alert in Alerting

How to execute a mysql command over ssh script based on alert

Cuyose — Mon, 16 Jun 2014 17:45:56 GMT

Can't find an easy way to do this. I want to create a .py script that gets kicked off when an alert triggers. I can run a single command from the splunk machine cli, however it prompts me for a password.

Basically when I see an event I want to write the results of a sql query to a file. Since mysql is not installed on the splunk machine I need to ssh to the mysql machine to run the statement.

How have people been solving this?

Re: How to execute a mysql command over ssh script based on alert

martin_mueller — Mon, 16 Jun 2014 18:13:20 GMT

To avoid getting prompted for an SSH password you can store your SSH key on the other machine and log in using that.

Re: How to execute a mysql command over ssh script based on alert

Cuyose — Mon, 16 Jun 2014 18:49:50 GMT

I got around this by just installing mysql client on the splunk machine and creating a simple py script
import os
os.system("mysql -u {user} -p{psw} -h {hostIP} -e "show full processlist;" -B >> /splunk/showprocesslist.csv")
This appends to a csv file

Re: How to execute a mysql command over ssh script based on alert

yannK — Mon, 16 Jun 2014 18:49:51 GMT

If you found the solution, you should reply as an answer and accept your answer.
It will help the other users, and mark the question as resolved.