In short, I have a router with an IP address on a virtual machine, and I need that when I receive a log that one of its interfaces has turned off, a trigger is triggered and my script runs. test1.py from netmiko import ConnectHandler R1 = { "device_type": "cisco_ios", "host": "R1", "ip": "192.168.12.130", "username": "admin", "password": "admin1" } def main(): commands = ['int fa3/0', 'no sh' ] connect = ConnectHandler(**R1) connect.enable() output = connect.send_config_set(commands) print(f"\n\n-------------- Device {R1['ip']} --------------") print(output) print("-------------------- End -------------------") if __name__ == '__main__': main() Login to splunk I get, the Add to Triggered Alerts trigger is triggered. But the .py file itself does not run. Checked through ".../splunk.exe cmd python .../test1.py " it starts and works. alert_actions.conf [test1] is_custom = 1 label = Change_interface_state description = Change_interface_state icon_path = test1.png alert.execute.cmd = test1.py app.conf [install] is_configured = 1 state = enabled [ui] is_visible = 1 label = test [launcher] author = QAZxsw description = This is custom version = 1.0.0 test1.html <from class="from-horizontal from-complex"> <p>Change state of interface</p> </from> Help (._.)
... View more
