Error in 'sendalert' command: Alert script returne...

katshima · ‎05-24-2024

I am generating alarms by acquiring abnormal values for CPU usage of NW devices.
I would like to send these alarms via email or webhook, but I get the above error and cannot send them.

What is the cause?

Error in 'sendalert' command: Alert script returned error code 2.

fredclown · ‎05-24-2024

You can search the internal Splunk logs to see if there are any errors logged. If you run this what do you get?

index=_internal sendemail sourcetype!=splunkd_ui_access sourcetype!=splunkd_remote_searches ERROR

Error in 'sendalert' command: Alert script returned error code 2.

alert action

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Join the Conversation

Error in 'sendalert' command: Alert script returned error code 2.

alert action

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas