I am trying to run a custom shell script with the hostname returned in my results. How to get the hostname field passed on to the custom script.
I tried "1.sh $result.host$" which is not working.
Is this custom script for running from an alert?
Are you just trying to run a script or have you created a custom alert action app and you are trying to create the script? The former is being deprecated and the later is the preferred way.
If you want to send a value to the script, you will have to send it in with the results ( ... | eval hostname=thishost ) as there are no parameters that you can send on the "command line".
... | eval hostname=thishost