Alerting

Splunk alert is not running my script

fiyadeleon
Engager

Hi all, so I have this splunk alert that has an action that runs a script. It was working previously, but since we migrated to another third party platform we had to change the code, it still has the same name and we didn't deleted  the old one from its directory app/bin/scripts.

We also do not have a backend access even in dev environment so I was hoping if anyone knows how to investigate through UI. Thank you in advance.

Labels (1)
0 Karma
1 Solution

fiyadeleon
Engager

this has been fixed. i was missing a parameter on my curl command

View solution in original post

0 Karma

fiyadeleon
Engager

this has been fixed. i was missing a parameter on my curl command

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...