Running a Custom Script

zacksoft · ‎11-20-2017

In one of my alert I want to a trigger a script (to reboot the Linux sever) when a specific condition is met.
I have my search query ready. When I click on the 'run a script' option it says , "Create a custom alert action to package a custom script instead. "
Can anyone guide me what is this custom action alert package ?

skalliger · ‎11-20-2017

Hi,

the "run a script" alert action is deprecated (unfortunately). You have to adapt to the new way, the so-called "custom alerts". You can read about it here and here.

Skalli

Running a Custom Script

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent

Join the Conversation

Running a Custom Script

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent