Thanks For Downloading!
Review the documentation below and follow any custom installation steps. If no install steps are listed, most Splunk Apps and Add-ons can be installed as follows:
Unix/Linux: Decompress the downloaded file using a tool like
This package includes a simple alert script that sends Splunk alerts as notifications to a Growl deamon over network (UDP).
Growl is a notification utiliy for Mac OS X that displays notification from various applications. For more information about Growl and to download it visit <http://growl.info/>
Please send your feedback to splunk at spp.at.
If you have questions/issues/ideas don't hesitate to ask them on Splunk Answers: <http://answers.splunk.com/questions/tagged/app-growl-spp>
- Growl has to be installed on your Mac OS X client machine.
On your client machine:
Setup growl to listen on the network for incoming notifications and enter a password to allow remote application registration. To do so go to System Preferences on your Mac > Growl > Network - See <http://dl.dropbox.com/u/1160714/screens/growl_config_screen.png>
On the Splunk Server:
Copy the growlnotify.py form the package to the following folder on your Splunk Server:
Make sure the script is executable:
Edit the growlnotify.py and enter the values for the following variables:
Excute the growlnotify.py with
You will get an entry in Growl > Applications where you can configure how Splunk notifications should look like.
Set up a scheduled search and enter as alert action "Trigger shell script" and fill in growlnotify.py as the "Filename of shell script to execute". See <http://dl.dropbox.com/u/1160714/screens/save_search_dialog.png>
When the search is executed and the conditions match, the growlnotify script will be invoked which will send a notification to the Growl host using the saved search name as a title and the number of events as the message.
If you want to customize the message that is displayed within the Growl notification, you'll have to customize the search. Once the saved search name ends with "--inline", then the growlnotify script will take a look at each result of the search if it contains a field called "growl_msg" and will send a notification with the value of this field.
Save this search with the search name "
Versions and Release Notes
Version 1.0 (current version - updated Sep 24, 2010)
Would be really cool if you could update this script to use the new GNTP communication protocol for Growl as they have removed the UDP communication stack from the latest version.
reviewed 27 Mar, 23:24
accept rate: 0%
Note: This will not work with Growl later than 1.2.2; the UDP support was removed after this version and this script does not support TCP.
reviewed 18 Jun '12, 11:50
accept rate: 0%