Splunk IT Service Intelligence

Not able to pass field value to notable event(ITSI) script action splunk

AniPrag
Engager

Hi All,

I am trying to pass filed value to a customize script but some how not able to do that. Ex: i am trying to pass Hostname in the script but as per document $result.Hostname is not working... i also tried below option as well

In alert_actions.conf

param.name = $result.Hostname$

showing error invalid stanza

then call the script action

action.py

host = settings.get('name')


any thing Now working.... if there could be any help..

0 Karma

szhou_splunk
Splunk Employee
Splunk Employee

Hi, @AniPrag have you tried %HostName% in stanza?

0 Karma

AniPrag
Engager

@harishalipaka I have already tried that option its not working... Just printing $result.HostName$ nothing else.

0 Karma