Alerting

How to execute a mysql command over ssh script based on alert

Cuyose
Builder

Can't find an easy way to do this. I want to create a .py script that gets kicked off when an alert triggers. I can run a single command from the splunk machine cli, however it prompts me for a password.

Basically when I see an event I want to write the results of a sql query to a file. Since mysql is not installed on the splunk machine I need to ssh to the mysql machine to run the statement.

How have people been solving this?

Tags (4)

Cuyose
Builder

I got around this by just installing mysql client on the splunk machine and creating a simple py script
import os
os.system("mysql -u {user} -p{psw} -h {hostIP} -e "show full processlist;" -B >> /splunk/showprocesslist.csv")
This appends to a csv file

yannK
Splunk Employee
Splunk Employee

If you found the solution, you should reply as an answer and accept your answer.
It will help the other users, and mark the question as resolved.

martin_mueller
SplunkTrust
SplunkTrust

To avoid getting prompted for an SSH password you can store your SSH key on the other machine and log in using that.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Mile High Learning with Splunk University, Denver, Colorado

If Denver is known for its mile-high elevation, Splunk University is about to raise the bar on technical ...

IT Service Intelligence 5.0 Series: Your Guide to the June Launch

We are excited to announce the June release of Splunk IT Service Intelligence (ITSI) 5.0. This update ...

Agent Mode Engaged! Enchaining Agentic Operations with Splunk AI Assistant 2.0

    Are you ready to transform how your team handles complex data requests? We invite you to our upcoming ...