Does anyone have a sample alert script that, once triggered, takes the data set handle passed to it from the Splunk alert, opens up the csv.gz events file, processes the resulting events, and formats and send an snmp message (that includes results, etc) to a monitoring system?
Anything anyone would care to share along these lines would be greatly appreciated.
