All Apps and Add-ons

Can't select action in "Execute external workflow action" 's window

osakachan
Communicator

I have in my EWA (External Workflow Actions) diferent alert_action for testing it and all of them enabled. I checked the alert_action column with the names used in alert_actions.conf. When I use the Execute EWA action, the dropdown is like is disabled.

Don not know what more to check, thanks for reading.

EWA window

osakachan
Communicator

Found this in _internal:

2018-06-27 08:31:10,111 ERROR  pid="29459" logger="alert_manager_rest_handler" message="Unknown exception: int() argument must be a string or a number, not 'NoneType'" (externalworkflow_actions_rest_handler.py:64)
Traceback (most recent call last):
  File "/opt/splunk/etc/apps/alert_manager/bin/externalworkflow_actions_rest_handler.py", line 54, in handle
    return operator.methodcaller(method, args)(self)
  File "/opt/splunk/etc/apps/alert_manager/bin/externalworkflow_actions_rest_handler.py", line 87, in handle_get
    return operator.methodcaller(action, sessionKey, query_params)(self)
  File "/opt/splunk/etc/apps/alert_manager/bin/externalworkflow_actions_rest_handler.py", line 205, in _get_externalworkflow_actions
    if int(entry['disabled']) == 0:
TypeError: int() argument must be a string or a number, not 'NoneType'

So I deleted the check for the disable the if made and right now I can use the dropdown.

Someone knows how to check this?: uri = '/servicesNS/nobody/alert_manager/storage/collections/data/externalworkflow_actions?q=output_mode=json'

I think there was the error, I would like have my if back 🙂

0 Karma

my2ndhead
SplunkTrust
SplunkTrust

Clearly a bug, will take a look...

my2ndhead
SplunkTrust
SplunkTrust

Here's the fix that we will put into the next release.

if len(entries) > 0:
            for entry in entries:        
                status = False if ( entry['disabled'] == 0 or entry['disabled'] == "0" or entry['disabled'] == False) else True

                if status == False:
                    ewa = {'_key': entry['_key'], 'label': entry['label'], 'alert_action': entry['alert_action'] }
                    externalworkflow_actions.append(ewa)
        return self.response(externalworkflow_actions, httplib.OK)

knalla
Path Finder

Hi, I had similar issue, I updated externalworkflow_actions_rest_handler and its still same.

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...