Alerting

Trying to create a custom alert action, how do I troubleshoot error "unable to find action script for action..."?

adylent
Path Finder

I'm trying to create a custom alert action, but I'm seeing an error in the splunkd.log .

WARN sendmodalert - action=myapp  - Unable to find alert action script for action="myapp" in app="myapp_alerts"

What is the best way to troubleshoot this?

Thanks

0 Karma
1 Solution

jkat54
SplunkTrust
SplunkTrust

jkat54
SplunkTrust
SplunkTrust

adylent
Path Finder

Thanks @jkat54. That solved my issues pretty much immediately.

The issue I was having was my [custom_alert_action] values were different

Very appreciated!

bin

[custom_alert_action_script]

default
    alert_actions.conf
    app.conf
    restmap.conf
    setup.xml
    data
        ui
            alerts
                [custom_alert_action].html
0 Karma

ppablo
Community Manager
Community Manager

Hi @adylent

Now that @jkat54's comment has been converted to an answer, don't forget to resolve the post by clicking "Accept" directly below his answer. Thanks!

Patrick

0 Karma

jkat54
SplunkTrust
SplunkTrust

2 years old, and now I’m a moderator so I accepted 😉

0 Karma

jkat54
SplunkTrust
SplunkTrust

Ok I converted my comment to answer. I didn't think it would be that easy but thought I'd just point you in a direction and see!

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...