How to create a custom alert action/how do I troubleshoot error "unable to find action script for action..."?

[adylent]

I'm trying to create a custom alert action, but I'm seeing an error in the splunkd.log .

WARN sendmodalert - action=myapp  - Unable to find alert action script for action="myapp" in app="myapp_alerts"

What is the best way to troubleshoot this?

Thanks

[jkat54 · Accepted solution]

I'd start where you've probably already been:

http://docs.splunk.com/Documentation/Splunk/6.4.2/AdvancedDev/ModAlertsIntro

[adylent]

Thanks @jkat54. That solved my issues pretty much immediately.

The issue I was having was my [custom_alert_action] values were different

Very appreciated!

bin

[custom_alert_action_script]

default
    alert_actions.conf
    app.conf
    restmap.conf
    setup.xml
    data
        ui
            alerts
                [custom_alert_action].html

[ppablo]

Hi @adylent

Now that @jkat54's comment has been converted to an answer, don't forget to resolve the post by clicking "Accept" directly below his answer. Thanks!

Patrick

[jkat54]

2 years old, and now I’m a moderator so I accepted 😉

[jkat54]

Ok I converted my comment to answer. I didn't think it would be that easy but thought I'd just point you in a direction and see!

[geekf]

I have the same issue but the link you mentioned is no longer working.