Alerting

Puppet Tasks Alert Actions for Puppet error

vanacjo
New Member

As i was trying to get the application working, i'm always getting an error on cim_actions.py.

See below for a view on how everything is set:

Application config:
alt text

Alert config:
alt text

The error coming from /opt/splunk/var/log/splunk/puppet_enterprise_tasks_modalert.log:

2018-12-13 14:41:42,213 INFO pid=16947 tid=MainThread file=cim_actions.py:message:353 | sendmodaction - worker="joris-pcub" signature="Invoking modular action" action_name="puppet_enterprise_tasks" search_name="db stopped" sid="rt_scheduler__admin__search__RMD54202f6647ebbb67d_at_1544699239_353" rid="0.2" app="search" user="admin" action_mode="saved"
2018-12-13 14:41:43,163 INFO pid=16947 tid=MainThread file=setup_util.py:log_info:114 | Log level is not set, use default INFO
2018-12-13 14:41:43,163 INFO pid=16947 tid=MainThread file=setup_util.py:log_info:114 | Customized key can not be found
2018-12-13 14:41:43,311 ERROR pid=16947 tid=MainThread file=cim_actions.py:message:353 | sendmodaction - worker="joris-pcub" signature="Error: cannot concatenate 'str' and 'NoneType' objects. Please double check spelling and also verify that a compatible version of Splunk_SA_CIM is installed." action_name="puppet_enterprise_tasks" search_name="db stopped" sid="rt_scheduler__admin__search__RMD54202f6647ebbb67d_at_1544699239_353" rid="0.2" app="search" user="admin" action_mode="saved" action_status="failure"

@domeger

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...