Output scheduled searches' results to syslog?

[aaronpmcconnell]

I'm trying to output an alert via syslog to our Orion server. Any suggestions on how to do that?

[jtrucks]

Launch a script on the splunk server. Have that script parse the results, format a syslog message, and send it via the logger command to syslog.

[lukeh]

It can be done quite easily, an example is available in the admin manual: http://www.splunk.com/base/Documentation/latest/Admin/Configurescriptedalerts

Luke 🙂

[Mick]

Get your scripting hat on, this isn't a feature Splunk can just do I'm afraid. Somebody out in the wide world may have done this already, but I've not specifically heard of it.