All Apps and Add-ons

Splunk - Add-on builder - cant execute webhooks

jtlittle
Path Finder

anyone know why I cant execute filesystem commands in the app builder with python and slack web hooks?

https://splunkbase.splunk.com/app/2962/
user log 1:

2018-03-07 18:34:42,033 ERROR pid=24690 tid=MainThread file=cim_actions.py:message:271 | sendmodaction - signature="Error: 'module' object has no attribute 'process_event'. Please double check spelling and also verify that a compatible version of Splunk_SA_CIM is installed." action_name="test_alert" search_name="test_arf" sid="1520447680.116" rid="0" app="TA-fancydudeapp" user="admin" action_mode="adhoc" action_status="failure"

log 2:

The os module/method can be used to execute filesystem commands.

1 Solution

starcher
Influencer

Make sure for every gui parameter you have a line in the default alert_actions.conf

[test_alert]
param.process_event = 

View solution in original post

0 Karma

jtlittle
Path Finder

ok so the add-on builder does not do this for you?

support has me using this

https://splunkbase.splunk.com/app/2962/

I can check the alert_actions.conf

I think ill need to SSH to it and use nano cause I don't recall that ability in the app.

thanks for your recomendation ill try that.

-Jon

0 Karma

starcher
Influencer

Make sure for every gui parameter you have a line in the default alert_actions.conf

[test_alert]
param.process_event = 
0 Karma

jtlittle
Path Finder

I tired this :

param.process_event="red_alert"

this is set as the alert action or the app name?

0 Karma

dijikul
Communicator

Can you expand on this? I'm encountering the same issue and adding the process_event parameter does nothing..

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...