I have created a custom alert action loosely based on the Webhooks example. I have created all the configuration files based on my best understanding of the process outlined in the docs. The action will send notifications to an event management tool to integrate with our blackout and group management tools. I am getting a handful of errors when splunk is restarted as reported by the log file.
The alert action set up requires a number of inputs. The first error I am seeing is causing setup to error out. The log is showing this error:
04-20-2018 13:11:24.491 -0400 ERROR SetupAdminHandler - Error while fetching url=/servicesNS/nobody/alertcustomintegration/admin/alertactions/new/?strict=true;search=%20eai%3Aacl.app%3D%22%22%20OR%20eai%3Aacl.app%3D%22alert_customintegration%22
I logged onto the web service using a browser and noticed that I don't see alert_customintegration under that location. So I suspect I have missed some fundamental step or configuration to make this work properly. If I am understanding this correctly, it may not have created the web service endpoint. Hopefully someone has some inkling as to what might be causing this error and can pass it along.