Alerting

Why are we Missing stacktrace in alert?

curvers
New Member

For an alert that los to slack, i have this config:
to show the errors from the log in the channel

Message: $result.log$

I am missing the stacktrace, it seems that either only the first line is shown / message part of the error without the stacktrace
what could be the cause or resolution for this?

Thanks

Labels (1)
0 Karma

kynops
Observer

We are facing a similar issue. Did you find a possible solution to this?

0 Karma

PickleRick
SplunkTrust
SplunkTrust

I'm not familiar with the Slack add-on so I won't help you much but it will probably help if you are a bit more precise.

For me it's not clear whether it's just the Slack action that behaves wrongly or if it's an issue of the search in the alert itself. If you create an alert with, let's say, an email action with the same search do you get the desired result?

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...