Join the Conversation
- Find Answers
- :
- Using Splunk
- :
- Other Using Splunk
- :
- Alerting
- :
- Re: Execute .cmd Splunk CLI Script alert with .sh...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Splunk Community,
I don't want to get technical on this, but I have an alert that I would like to run a .cmd file from when it triggers. This .cmd runs a Splunk CLI script that generates a report which correlates to the alert.
I am assuming that Splunk only recognizes .sh files within the C:\Program Files\Splunk\bin\scripts directory. Therefore, is there an easy way to execute a .cmd file with a .sh script?
Thank you!
Daniel
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you are running Splunk on Windows, Splunk will run .bat scripts instead of .sh scripts.
So just write a .bat script that launches whatever you like!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you are running Splunk on Windows, Splunk will run .bat scripts instead of .sh scripts.
So just write a .bat script that launches whatever you like!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
All you should need to do is to put the full path to the script in the right box of the alert actions.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I was able to successfully create the .bat file. But Splunk still does not run the script. Do I have to add an additional command to run the .bat file in the script field of the alert?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is this even possible?
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas
What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)
Automating Threat Operations and Threat Hunting with Recorded Future
