Splunk Alert with run a script action - splunk

Is there any way to run external script with source IP (source IP of device which sent alert to splunk, host= value in event) address as variable?
There is in splunk documentation few variables but non of them are host.
I need to trigger config download from Solar Winds upon change of config. All syslog messages are sent to splunk. So when alert is triggered it would run script ./update $SOURCE_HOST

You can trigger an Alert on anything you like. If you want the Alert to run a script, just parse-out the information you need into a field so you can pass it to your script.

Related

how to send customized Test status in Auto trigger e-mail after git pipeline job got passed or failed

I have created a Git pipeline job, which running daily and sending automatically e-mail for build status, but I want to customise the e-mail content with Specific Scenario Number, Status and Reason of Script failure.
How can I achieve it ? any suggestion please.

Execute internal server script in grafana

I would like to know how to execute a script in response to an alert in Grafana.
I want to execute the script in a shell when the temperature is greater than 25C. The script connects to an ESX server and turns off all VM's.
I've created the script that connects to the ESX server, but I'm not sure how to call it from Grafana.
Use the Alert Webhook notifier. It sends a json document to the webhook url every time an alert is triggered.
You will need to build some sort of backend service (in any language/web framework) that can listen to HTTP requests. This service would take in the JSON document, parse it and then shell out to execute your script.

How to perform a command in a shell on remote server immediately after deploying some code from intellij idea?

I have a web server running on a virtual machine and I need some actions (e.g. "service apache2 reload") to be performed there automatically after I'll deploy my code from Idea
Automatically -- no way AFAIK.
https://youtrack.jetbrains.com/issue/WI-3344 -- watch this ticket (star/vote/comment) to get notified on any progress.
You may also watch related tickets:
https://youtrack.jetbrains.com/issue/WI-23938
https://youtrack.jetbrains.com/issue/WI-3239
The only manual solutions I may suggest right now are:
either keep SSH console opened (IDE has it built-in) and execute such command manually once deployed
or create "Remote SSH External Tools" entry that will do such job (connect and issue specified command) manually after deployment (once created you can assign custom shortcut to it so it can be run more easier).
In both cases -- check this manual.

RabbitMQ - Log for Purge of Queues

There are several posts out there that show how to purge a queue from the administrator console, command line, and via code. I'm trying to find out if this command is issued, if there is a log that tracks that.
I'm trying to track down some missing messages from a Linux box to a Windows box. I've looked at the log files and don't see anything special there for the date time and also have looked at up times of Rabbitmq, Python, and Erlang, which I use for sending the messages. The Python code has a try catch around it and is to write any exceptions or errors to a log file, but I don't have any reported info.
The issue occurred yesterday and the processes seem to of been running for weeks. The window of issue was about 5 minutes.
One of the options I'm trying to eliminate is trying to see if someone manually purged the queue and I'm curious if they did, where would this be logged (need for both Windows and Linux). I have this as a reference https://www.rabbitmq.com/relocate.html but it doesn't clearly show if these commands are logged and if so, which file it would be logged in.

OSX: "Window Server: failed setting the front application to My App"

I am launching a launchAgent from a post install script using the following command:
su -l $LOGGED_IN_USER -c "/bin/launchctl load /Library/LaunchAgents/com.myApp.mac.agent.plist"
The agent displays a status item (NSStatusItem) with a couple of menu options. One of them has a settings option. Clicking this will open an NSWindow, with few NSTextFields. At times, though this window is the top most, whatever I type goes to the underlying app. I am unable to type anything into the text field. Whenever this happens, I notice the following log in the console:
WindowServer[97]: [cps/setfront] Failed setting the front application to MyApp, psn 0x0-0xb20b2, securitySessionID=0x186c5, err=-600
This is not a consistent behaviour. Any idea why this log comes? And is there any work around for this? Is it ok to launch the agent using su -l?
I don't know exactly why you're getting that error and behavior. I recommend reading Technical Note TN2083: Daemons and Agents. It explains in detail the various facets of the execution context of a process and how that affects what a process can do. That includes whether or not a process can connect to the Window Server.
For what it's worth, error -600 is procNotFound, whose description is "no eligible process with specified descriptor". It seems that the Window Server is not able to find a process with the given process serial number (PSN) in the given security session.
I would not use -l in your sudo command. A user's login scripts can do all sorts of crazy things and you don't those done by your installer. However, I don't believe that's related to the main problem.