I am following the instructions in http://docs.splunk.com/Documentation/Splunk/6.4.1/AdvancedDev/ModAlertsAdvancedExample using Splunk 6.4.1
I created alert_actions.conf per the documentation and get these errors (changed company name and token value)
Invalid key in stanza [hipchat] in /opt/splunk/etc/apps/hipchat_app/default/alert_actions.conf, line 10: param.base_url (value: http://mycompany.hipchat.com/v2).
Invalid key in stanza [hipchat] in /opt/splunk/etc/apps/hipchat_app/default/alert_actions.conf, line 11: param.auth_token (value: cyeYO123L5xwzZf2NmEQFD2A1ajm5PQu3O37yIVf).
is_custom = 1
label = HipChat
description = Send HipChat room notifications
icon_path = hipchat_alert_icon.png
payload_format = json
param.base_url = https://mycompany.hipchat.com/v2/room/2943772/notification?
param.auth_token = cyeYO123L5xwzZf2NmEQFD2A1ajm5PQu3O37yIVf
If I comment out those two args that are getting errors and then try editing the actions of a saved search
1) I don't see the ability to add a hipchat alert under add actions
So basically I only need the python script and the few other configs, right? I am not sure what is causing the invalid key in stanza error.
I am not using any other Splunkbase apps.
I ended up installing this app https://splunkbase.splunk.com/app/2879/ and that worked for me.
The python script was different from that documented in http://docs.splunk.com/Documentation/Splunk/6.4.1/AdvancedDev/ModAlertsAdvancedExample
View solution in original post