×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
shadowlu
Loves-to-Learn Lots
Member since: ‎03-05-2024
‎12-07-2024
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎03-05-2024
Activity Feed
Topics I've Started
View All

Re: DECRYPT2 - Splunk Email Alert

by in Splunk Search
‎03-06-2024 08:51 AM
‎03-06-2024 08:51 AM
Yeah I did that and it works for them. In the logs, I see the following error: 03-06-2024 05:05:01.427 -0800 ERROR ScriptRunner [1509543 AlertNotifierWorker-0] - stderr from '/opt/splunk/bin/python3.7 /opt/splunk/etc/apps/search/bin/sendemail.py "results_link=https://splunksrver:8000/app/search/@go?sid=scheduler_bHVkQGVjbi5vZW0uZG9lLmdvdg__search__RMD500f838a99e0e9d56_at_1709730300_4407" "ssname=Test Windows Encode" "graceful=True" "trigger_time=1709730300" results_file="/opt/splunk/var/run/splunk/dispatch/scheduler_bHVkQGVjbi5vZW0uZG9lLmdvdg__search__RMD500f838a99e0e9d56_at_1709730300_4407/results.csv.gz" "is_stream_malert=False"':  _csv.Error: line contains NUL ... View more

DECRYPT2 - Splunk Email Alert

by in Splunk Search
‎03-05-2024 12:48 PM
‎03-05-2024 12:48 PM
Using the DECRYPT2 app, I have a search that uses the decrypt command to decode a encoded string. It returns results as a table just fine. I created a email alert using this search but the email alert fails to trigger unless I remove the decrypted field from the table.  I would like the email alert to be sent which includes the decoded value from the decrypted field. Anyone might know what the issue is?  ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎12-07-2024 01:44 AM