In short, I have a router with an IP address on a virtual machine, and I need that when I receive a log that one of its interfaces has turned off, a trigger is triggered and my scriptruns. t...
The link http://docs.splunk.com/Documentation/Splunk/6.4.2/Alert/Configuringscriptedalerts states that the feature is deprecated and have to use the "runascript" from the AlertActions. I haven't t...
Hi all, so I have this splunk alert that has an action that runs ascript. It was working previously, but since we migrated to another third party platform we had to change the code, it still has t...
...he Search Head as a Deployment server in order to deploy the scripts to the endpoints, which have a Universal Forwarder installed on them, but I don't know how to trigger that script to runafter the alert...
...earchScheduler - Error in 'sendalert' command: Alertactionscript for action "splunk2alc" not found., search='sendalert splunk2alc results_file="/opt/splunk/var/run/splunk/dispatch/s...
1. I have an alert scheduled to run every hour to get updated list of IPs of public nodes. 2. I need to run the scriptagainst each result IP and if output=success, I need to send email to s...
...he resulting searching came across people talking about creating custom alertactions.
In my head this seems to suggest that the original way is left in for legacy so defining a new one is your b...
I have my Splunk Enterprise running on Windows and forwarder on AIX. I have configured an alert for my desired condition.
I need to runascript that is present on my forwarder as post alertaction...
how do I pass my search output results to a custom alertactionscript(test.py) which has some static parameters ? for ex. I have a statistics table which has two columns Hosts and Count.. I want t...
Hi, we want to block malicious IP address in firewall as alertaction. We run python script to block such IP address through REST api. It seems okay.
However, we're requested to unblock such b...