Are you a member of the Splunk Community?
- Find Answers
- :
- Using Splunk
- :
- Other Using Splunk
- :
- Alerting
- :
- Execute .cmd Splunk CLI Script alert with .sh She...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Splunk Community,
I don't want to get technical on this, but I have an alert that I would like to run a .cmd file from when it triggers. This .cmd runs a Splunk CLI script that generates a report which correlates to the alert.
I am assuming that Splunk only recognizes .sh files within the C:\Program Files\Splunk\bin\scripts directory. Therefore, is there an easy way to execute a .cmd file with a .sh script?
Thank you!
Daniel
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you are running Splunk on Windows, Splunk will run .bat scripts instead of .sh scripts.
So just write a .bat script that launches whatever you like!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you are running Splunk on Windows, Splunk will run .bat scripts instead of .sh scripts.
So just write a .bat script that launches whatever you like!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
All you should need to do is to put the full path to the script in the right box of the alert actions.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I was able to successfully create the .bat file. But Splunk still does not run the script. Do I have to add an additional command to run the .bat file in the script field of the alert?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is this even possible?
Tech Talk Recap | Mastering Threat Hunting
Observability for AI Applications: Troubleshooting Latency
Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?
