topic Scripts for Alert Actions in Alerting

Scripts for Alert Actions

nawazns5038 — Tue, 29 Sep 2020 17:48:28 GMT

Hi,

Can I please get an example of a script to make use of the alerts results.
I have read the documentation that the "$SPLUNK_ARG_8" has the location that holds the results in a zip file .
I want to know how can I access the zip file or open it and use the results by a python or a shell script.

Re: Scripts for Alert Actions

nawazns5038 — Fri, 26 Jan 2018 01:24:36 GMT

Can we use python scripts other than shell scripts for alert actions ?

Re: Scripts for Alert Actions

yannK — Fri, 26 Jan 2018 01:51:23 GMT

Example with scripted alert
https://docs.splunk.com/Documentation/SplunkCloud/latest/Alert/Configuringscriptedalerts
The idea behind the argument to the result zip file, is to use verify the presence of the file, then unzip, read the results (sometimes in csv). then trigger actions. As the scripts runs as the splunk user, it should be able to access the file.
Also splunk ships with python so you can use this language.

Otherwise nowadays, the supported method is to use custom alert actions

http://docs.splunk.com/Documentation/SplunkCloud/latest/Alert/CreateCustomAlerts

Re: Scripts for Alert Actions

nawazns5038 — Sat, 27 Jan 2018 01:39:45 GMT

Yes I could see the link,
Could you please paste some example scripts that are in use or that can be used.