topic Re: Custom Alert Action UI Params not saving in Splunk Dev

Custom Alert Action UI Params not saving

knutsod — Fri, 14 Aug 2020 17:38:07 GMT

Hello,

I have created a custom alert action app as specified in the Splunk development documentation. I also created another more basic app to test and am still having the same issue. The issue is that the custom alert action ui params are not saving. If I manually add the action.testalert.param.subject to the entry in savedseraches.conf it will get passed to my script, but when I save the parmas from the UI they do not get back to the config file.

alert_actions.conf

[testalert] is_custom = 1 label = Test Alert payload_format = json # A default param param.foo = Bar

The alert action UI

<splunk-control-group label="Subject"> <splunk-text-input name="action.testalert.param.subject" id="subject"> </splunk-text-input> </splunk-control-group>

I have tried including a savedsearches.conf.spec to define the custom param with no effect and have also attempted changing the permissions/exports in default.meta with no success. Any idea what is going on?

Re: Custom Alert Action UI Params not saving

alonsocaio — Fri, 14 Aug 2020 19:22:08 GMT

Hi,

I suppose the subject parameter is defined on alert_actions.conf, right?

Also, I had a similar issue a while ago, and I guess It was solved by adding a alert_actions.conf.spec file containing my parameters and Its data types.

Something like:

[my_alert_action] param.my_param = <string>

In my app I have placed this file under README dir.

Re: Custom Alert Action UI Params not saving

knutsod — Fri, 21 Aug 2020 19:04:39 GMT

I created a spec file for alert_actions.conf and this did not change anything unfortunately.

Re: Custom Alert Action UI Params not saving

k_ivesic — Thu, 30 Sep 2021 15:30:17 GMT

Same here, have you figured it out, maybe?