Getting Data In

How to execute perl script in splunk

abhayneilam
Contributor

Hi,

Please help me to execute my perl script through splunk. I dont know where to keep that script and how to execute. Kindly show me only example with one perl script..

Thanks

0 Karma

Ayn
Legend

I'd be thrilled to hear what you're trying to do - it's always a challenge to see if there IS a way to do it in Splunk after all (there often is) 🙂

alacercogitatus
SplunkTrust
SplunkTrust

I believe what you want is to run an alert action. Schedule the search for the data you want sent to the script. Make an alert action that runs a script. The arguments are sent to the script and you can parse it at will from there.

http://docs.splunk.com/Documentation/Splunk/5.0/Alert/Setupalertactions#Run_a_script

abhayneilam
Contributor

I want to make some report, which I am not able to make through the commands available in splunk, that's y want to write a perl script so that its output can be my desired result ..

0 Karma

Ayn
Legend

Please give more information. What do you want to execute and when? Are you looking to implement a custom search command or do you want to use a script when an alert triggers, or something else entirely?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...