https://community.splunk.com/t5/Alerting/Why-does-my-alert-script-fail-on-windows/m-p/36836#M401 <P>I have spent most of the afternoon trying to work out why the script doesn't seem to work. From the logs I found in <CODE>%SPLUNK_HOME%\var\log\splunk\</CODE> the commmand will never work as long as my search command contains quotes, braces, &gt;, &lt; or &amp; anywhere. e.g</P> <P><CODE>C:\WINDOWS\system32\cmd.exe /c " "pathtosplunk\Splunk\bin\scripts\myscript.py" "49" "index="my_index" ("some" OR "other") | rex field=blah "(?&lt;breakage&gt;.*)" commands" "name_of saved search" "Saved Search [nameofsavedsearch] number of events(99)" "http://path toresults" "" "path\\to\\csv" "</CODE></P> <P>Is there any solution?</P> Tue, 19 Feb 2013 17:26:03 GMT jameshgibson 2013-02-19T17:26:03Z https://community.splunk.com/t5/Alerting/Why-does-my-alert-script-fail-on-windows/m-p/36836#M401 <P>I have spent most of the afternoon trying to work out why the script doesn't seem to work. From the logs I found in <CODE>%SPLUNK_HOME%\var\log\splunk\</CODE> the commmand will never work as long as my search command contains quotes, braces, &gt;, &lt; or &amp; anywhere. e.g</P> <P><CODE>C:\WINDOWS\system32\cmd.exe /c " "pathtosplunk\Splunk\bin\scripts\myscript.py" "49" "index="my_index" ("some" OR "other") | rex field=blah "(?&lt;breakage&gt;.*)" commands" "name_of saved search" "Saved Search [nameofsavedsearch] number of events(99)" "http://path toresults" "" "path\\to\\csv" "</CODE></P> <P>Is there any solution?</P> Tue, 19 Feb 2013 17:26:03 GMT https://community.splunk.com/t5/Alerting/Why-does-my-alert-script-fail-on-windows/m-p/36836#M401 jameshgibson 2013-02-19T17:26:03Z https://community.splunk.com/t5/Alerting/Why-does-my-alert-script-fail-on-windows/m-p/36837#M402 <P>The only way I have managed to get this working is by re-writing <CODE>%SPLUNK_HOME%\etc\apps\search\bin\runshellscript.py</CODE></P> <P>Clearly this is not a good solution and will break after any update. </P> Wed, 20 Feb 2013 11:54:49 GMT https://community.splunk.com/t5/Alerting/Why-does-my-alert-script-fail-on-windows/m-p/36837#M402 jameshgibson 2013-02-20T11:54:49Z