Alerting

webhook error

surekhasplunk
Communicator

Hi,

Alert is getting triggered, sendmail works fine but webhook not working. 

if i search index=_internal action=webhook

I see below error :

ERROR sendmodalert - action=webhook - Execution of alert action script failed

INFO sendmodalert - action=webhook STDERR - Sending POST request to url=http://XXXXXXXX/ with size=448 bytes payload

And in the splunkd.log i see below error :


07-15-2020 18:35:41.311 +0200 WARN ScriptRunner - Killing script, probably timed out, grace=5sec, script="bla/bla/splunk/etc/apps/alert_webhook/bin/webhook.py --execute"
07-15-2020 18:35:41.314 +0200 ERROR sendmodalert - action=webhook - Execution of alert action script failed
07-15-2020 18:35:41.314 +0200 ERROR sendmodalert - Error in 'sendalert' command: Alert script execution failed.
07-15-2020 18:35:41.314 +0200 ERROR SearchScheduler - Error in 'sendalert' command: Alert script execution failed., search='sendalert webhook results_file=

 

Do I have to pass the token also along with the url in the webhook configuration page ?

Currently in the triggeracgtion -> Webhook  -> url -> i have just added the client url like this : http://IPoftheclientmachine:port/

DO i have to append this with some token or something else at the end of the url ?

Labels (1)
Tags (2)
0 Karma

morethanyell
Builder

#metoo

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...