Use splunk commands in splunk alert shell script

sharafat1187 — Wed, 21 Feb 2018 07:39:14 GMT

Hello,

I am working on writing a shell script which will get executed after an splunk alert.
after processing the alert results in the shell script, i want to use splunk's "sendemail" command in the shell script.
Can somebody tell me is it possible to use splunk commands in the shell script?
if not how can i send email from that shell script?
I do not have any control on the splunk server as it is owned by devops team.

Re: Use splunk commands in splunk alert shell script

valiquet — Fri, 09 Mar 2018 10:53:54 GMT

Why don't you process the results within SPlunk with a scheduled alert? You should be able to send an email.

Also with ./bin/splunk you can run a search with |sendmail cmd

Otherwise, I would setup a savedsearch that send an email every time it runs, then run it from shell. Otherwise, use OS deamon

topic Re: Use splunk commands in splunk alert shell script in Alerting

Use splunk commands in splunk alert shell script

Re: Use splunk commands in splunk alert shell script