Re: webhook unable to send post data - Splunk Community

Alerting

STDERR - Sending POST request to url=http:/XXX.XXX.XXX.XXX:XXXX/ with size=448 bytes payload

How do i resolve this error.

@splunk_tci_2020

Can you please share the complete error message?

07-09-2020 12:30:42.303 +0200 INFO sendmodalert - Invoking modular alert action=webhook for search="SOC Use Case" sid="scheduler__xxxxxx__search__RMDXXXXXXXx" in app="search" owner="XXXX" type="saved"

07-09-2020 12:30:42.384 +0200 INFO sendmodalert - action=webhook STDERR - Sending POST request to url=http://xxxxxxxx/ with size=449 bytes payload

07-09-2020 12:35:42.374 +0200 ERROR sendmodalert - action=webhook - Execution of alert action script failed

07-09-2020 12:35:42.374 +0200 ERROR sendmodalert - Error in 'sendalert' command: Alert script execution failed.

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...