I'm trying to create a custom alert action, but I'm seeing an error in the splunkd.log .
WARN sendmodalert - action=myapp - Unable to find alert action script for action="myapp" in app="myapp_alerts"
What is the best way to troubleshoot this?
Thanks @jkat54. That solved my issues pretty much immediately.
The issue I was having was my [customalertaction] values were different
[custom_alert_action_script] default alert_actions.conf app.conf restmap.conf setup.xml data ui alerts [custom_alert_action].html
Ok I converted my comment to answer. I didn't think it would be that easy but thought I'd just point you in a direction and see!
Now that @jkat54's comment has been converted to an answer, don't forget to resolve the post by clicking "Accept" directly below his answer. Thanks!
2 years old, and now I’m a moderator so I accepted 😉