Getting Data In

INFO sendmodalert - action=call_api_script - Alert action script completed in duration=57 ms with exit code=0

Athildjax64
New Member

I am trying to run an API call based on a detection. After a few tries, the script is running, but it is ending with an exit code of 0 and I am not seeing the API call hit the web server.
I am concerned that the information from the stdin is not getting to the script and that is why it is failing. It runs normally from the CLI.

Tags (2)
0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...