All Apps and Add-ons

Splunk - Add-on builder - cant execute webhooks

jtlittle
Path Finder

anyone know why I cant execute filesystem commands in the app builder with python and slack web hooks?

https://splunkbase.splunk.com/app/2962/
user log 1:

2018-03-07 18:34:42,033 ERROR pid=24690 tid=MainThread file=cim_actions.py:message:271 | sendmodaction - signature="Error: 'module' object has no attribute 'process_event'. Please double check spelling and also verify that a compatible version of Splunk_SA_CIM is installed." action_name="test_alert" search_name="test_arf" sid="1520447680.116" rid="0" app="TA-fancydudeapp" user="admin" action_mode="adhoc" action_status="failure"

log 2:

The os module/method can be used to execute filesystem commands.

Labels (1)
1 Solution

starcher
Influencer

Make sure for every gui parameter you have a line in the default alert_actions.conf

[test_alert]
param.process_event = 

View solution in original post

0 Karma

jtlittle
Path Finder

ok so the add-on builder does not do this for you?

support has me using this

https://splunkbase.splunk.com/app/2962/

I can check the alert_actions.conf

I think ill need to SSH to it and use nano cause I don't recall that ability in the app.

thanks for your recomendation ill try that.

-Jon

0 Karma

starcher
Influencer

Make sure for every gui parameter you have a line in the default alert_actions.conf

[test_alert]
param.process_event = 
0 Karma

jtlittle
Path Finder

I tired this :

param.process_event="red_alert"

this is set as the alert action or the app name?

0 Karma

dijikul
Communicator

Can you expand on this? I'm encountering the same issue and adding the process_event parameter does nothing..

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...