Cannot publish Splunk alert in MS Teams with TA-ms-teams-alert-action

[justynap_ldz]

Hello Community,

We are configuring TA-ms-teams-alert-action to let the customer publish Splunk alerts in their MS Teams channel. The alert config is as follows:

When we try opening Webhook URL in browser for testing it says:  Invalid webhook request - GET not supported

While debugging TA-ms-teams-alert-action the logs say:

2022-12-12 13:17:05,698 DEBUG pid=106480 tid=MainThread file=cim_actions.py:message:292 | sendmodaction - signature="json data for final rest call:={
    "@type": "MessageCard",
    "@context": "http://schema.org/extensions",
    "themeColor": "0076D7",
    "summary": "Alert",
    "sections": [
        {
            "activityTitle": "Alert",
            "activitySubtitle": "",
            "activityImage": "https://myimage.png",
            "facts": [
                {
                    "name": "host",
                    "value": "hostname1"
                },
                {
                    "name": "sourcetype",
                    "value": "splunkd"
                }
            ],
            "markdown": false
        }
    ],
    "potentialAction": [
        {
            "@type": "OpenUri",
            "name": "View in Splunk",
            "targets": [
                {
                    "os": "default",
                    "uri": "https://splunk.mydomain.com/app/TA-ms-teams-alert-action/@go?sid=scheduler__username123_1233456"
                }
            ]
        }
    ]
}" action_name="ms_teams_publish_to_channel" search_name="test_alert" sid="scheduler__2username123_1233456" rid="0" app="TA-ms-teams-alert-action" user="username123" action_mode="saved"

Does anyone know how to troubleshoot this case?

Best regards,
Justyna

[guilmxm]

Hi @justynap_ldz 

Have you checked the logs?

https://ta-ms-teams-alert-action.readthedocs.io/en/latest/configuration.html#