All Apps and Add-ons

DBX output Alert action from Splunk DB Connect- How to resolve this error?

dinesh_wadhwa
Engager

Team, 

We are trying to use Splunk DB connect app's "Outputs" option to insert data in MySQL table.  For this we are using DBX output alert action  in Splunk alert and calling the "Output" from  Splunk db connect app.

Followed the below steps:

1) Created a new Output named "insertdb_cronjob" under "Outputs" Option in Splunk db connect app

2) Created an alert and  

3) Added the trigger actions as DBX output alert action where its calling  "insertdb_cronjob" to insert data into MySQL table.

4) Manually execution is working fine but when the alert is triggered, getting below error in internal logs:

10-28-2022 12:00:01.960 +0530 INFO  sendmodalert [3425498 AlertNotifierWorker-0] - Invoking modular alert action=alert_output for search="si_alert" sid="rt_scheduler__admin_c3BsdW5rX2FwcF9kYl9jb25uZWN0__RMD5f6c0cb1e9f4fe73f_at_1666933094_23674.0" in app="splunk_app_db_connect" owner="admin" type="saved"

10-28-2022 12:00:02.065 +0530 ERROR sendmodalert [3425498 AlertNotifierWorker-0] - action=alert_output STDERR -  Error: Could not find or load main class com.splunk.dbx.command.DbxAlertOutput

10-28-2022 12:00:02.068 +0530 INFO  sendmodalert [3425498 AlertNotifierWorker-0] - action=alert_output - Alert action script completed in duration=105 ms with exit code=1

10-28-2022 12:00:02.068 +0530 WARN  sendmodalert [3425498 AlertNotifierWorker-0] - action=alert_output - Alert action script returned error code=1

 

Can you please suggest if we are missing anything.

Thanks,

Dinesh

Labels (3)
0 Karma
Get Updates on the Splunk Community!

2024 Splunk Career Impact Survey | Earn a $20 gift card for participating!

Hear ye, hear ye! The time has come again for Splunk's annual Career Impact Survey!  We need your help by ...

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...