Alerting

Why are we Missing stacktrace in alert?

curvers
New Member

For an alert that los to slack, i have this config:
to show the errors from the log in the channel

Message: $result.log$

I am missing the stacktrace, it seems that either only the first line is shown / message part of the error without the stacktrace
what could be the cause or resolution for this?

Thanks

Labels (1)
0 Karma

kynops
Observer

We are facing a similar issue. Did you find a possible solution to this?

0 Karma

PickleRick
SplunkTrust
SplunkTrust

I'm not familiar with the Slack add-on so I won't help you much but it will probably help if you are a bit more precise.

For me it's not clear whether it's just the Slack action that behaves wrongly or if it's an issue of the search in the alert itself. If you create an alert with, let's say, an email action with the same search do you get the desired result?

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...