Why receiving error trying to push alerts into Swimlane using the Swimlane add-on?

srikaanth_amrut — Thu, 14 Apr 2022 17:11:58 GMT

Hello!

I'm trying to push alerts into Swimlane using the swimlane add-on. I've given full global permissions to the saved alert. There are 101 events to push but aren't getting pushed into Swimlane.

Please find logs below -

04-13-202210:50:57.393 +0200ERRORSearchScheduler - Error in 'sendalert' command:Alert script returned error code 1., search='sendalertpush_alerts_to_swimlaneresults_file="/opt/splunk/var/run/splunk/dispatch/scheduler_c3Jpa2FhbnRoLmFtcnV0aGEub3B0aXY_emZfY29ycmVsYXRpb25zX2ZpcmVleWU__RMD58b260abcef59878b_at_1649839800_2808/per_result_alert/tmp_16.csv.gz" results_link="https://mycompanyabcd.com/app/xxx_correlations_fireeye/search?q=%7Cloadjob%20scheduler_c3Jpa2FhbnRoLmFtcnV0aGEub3B0aXY_emZfY29ycmVsYXRpb25zX2ZpcmVleWU__RMD58b260abcef59878b_at_1649839800_2808%20%7C%20head%2017%20%7C%20tail%201&earliest=0&latest=now "'

04-13-202210:50:57.393 +0200WARN sendmodalert - action=push_alerts_to_swimlane- Alert action script returnederrorcode=1

Any advise appreciated. Thanks!

Re: Why receiving error trying to push alerts into Swimlane using the Swimlane add-on?

Anji_splunk — Fri, 24 Jun 2022 10:41:52 GMT

Hi @srikaanth_amrut ,

Were you able to resolve this issue? Please share the solution, I am facing same issue.

Thank you

Re: Why receiving error trying to push alerts into Swimlane using the Swimlane add-on?

stevenyeoh — Mon, 29 Aug 2022 02:10:24 GMT

Hi @srikaanth_amrut ,

Good day!

I would be interested to know if you are able to resolve the issue? I am facing the same problem as you too.

Thank you

topic Re: Why receiving error trying to push alerts into Swimlane using the Swimlane add-on? in Alerting

Why receiving error trying to push alerts into Swimlane using the Swimlane add-on?

Re: Why receiving error trying to push alerts into Swimlane using the Swimlane add-on?

Re: Why receiving error trying to push alerts into Swimlane using the Swimlane add-on?