topic Re: Is it possible to trigger a restart script on forwarder when an alert condition is met? in Alerting

Is it possible to trigger a restart script on forwarder when an alert condition is met?

krishnacasso — Fri, 04 Nov 2016 15:52:11 GMT

Hi,

We monitor server status using access live log. It will continuously check for 200 statuses from the log. When we have status other than 200, for 5 minutes we need to trigger an alert. I see a option in +add action to run a script. Can we place a restart script on the server where the forwarder is installed and trigger it whenever the alert condition in triggered?

Thanks.

Re: Is it possible to trigger a restart script on forwarder when an alert condition is met?

Masa — Sun, 06 Nov 2016 20:56:22 GMT

There is such built-in feature to access forwarder from a search head where you trigger a post script. So, you have to create your own scripts to make it work like that.

Re: Is it possible to trigger a restart script on forwarder when an alert condition is met?

krishnacasso — Mon, 07 Nov 2016 16:30:26 GMT

Thanks Masa,
Do we need to manually access the forwarder from UI or Is there a way to automate this.

Thanks.

Re: Is it possible to trigger a restart script on forwarder when an alert condition is met?

Masa — Tue, 08 Nov 2016 23:26:58 GMT

It depends. Your system admin should be able to advise how to remotely run command or access to remote server by script.