Splunk alerts logs: Where to see the logs generated by the Python Scrypt app?

[jdepedro]

Hi all, good morning,

my first question on the community, as I have just started learning.  So please be gentle if what I am asking is something obvious. 😉

I have configured an alert that executes two actions: send an email, and execute an customized app. 

I'd like to know how to search the logs generated by the execution of the actions configured on this alert, specifically the logs generated by the app. 

Could anyone please let me know where to see the logs generated by the app (python scrypt)?

Thanks in advance. Kind regards, 

Juan

[jdepedro]

thanks a lot, gcusello. I have found out some of the information that I wanted.

[gcusello · Accepted solution]

Hi @jdepedro,

at first I hint to add a third action: "Add to triggered alerts", so you can see your alert in the Splunk jobs.

Then, you can take the logs of the triggered alerts in _internal, as all Splunk logs.

About the python script, it depends on the script itself, but I'm not an expert of sctipting.

Ciao.

Giuseppe