RSA Admin

Run Command Output Action

Discussion created by RSA Admin Employee on Feb 8, 2011
Latest reply on Mar 11, 2011 by RSA Admin

I was surprised by how the "Run Command" output action is designed.  The content of the alert, rather than being passed in on the standard input, is passed in as a program argument.  And it's not even that, it's passed in as-is, so instead of a single argument with the content, you get 300+ arguments that you have to concatenate together.

 

This is a bug, right?  Is there a way to modify this behaviour?

 

John Davison

Outcomes