I'm trying to create a custom alert action, but I'm seeing an error in the splunkd.log .
WARN sendmodalert - action=myapp - Unable to find alert action script for action="myapp" in app="myapp_alerts"
What is the best way to troubleshoot this?
Thanks @jkat54. That solved my issues pretty much immediately.
The issue I was having was my [custom_alert_action] values were different
[custom_alert_action_script] default alert_actions.conf app.conf restmap.conf setup.xml data ui alerts [custom_alert_action].html
Now that @jkat54's comment has been converted to an answer, don't forget to resolve the post by clicking "Accept" directly below his answer. Thanks!