Error Code=3

Path Finder

06-26-2017 15:30:54.878 +0200 WARN sendmodalert - action=sendmail_action - Alert action script returned error code=3

Hello, someone know what mens error code 3 ???

Thanks in advance

Splunk Employee
Splunk Employee

If this issue was resolved, what was the fix? Permissions? Thanks.

0 Karma


Hi Mbarbaro,

I have had the same error for my own technical addon and by looking at the source code of the alerts script, error code 3 seems related to input parameters not being correctly parsed or value None (null), resulting in the alert script to quit.

If you are trying to add search results to the email message, use the $result.$ to add that specific field value. For example, if you want to add the value of the field user from your search results, this would be accomplished with $result.user$

0 Karma


Could you provide the exact Splunk version you are working with?

And is that the exact string returned?

I'd suggest perhaps narrowing down the issue by creating a new alert with a little selected as possible. Then add one thing at a time to it and see when it fails.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...