All Apps and Add-ons

Splunk Webhook t to Google hangout not working

Pmeiring
Explorer

Hi Community 

We are currently running into Alert issue with the Hangouts Webhook on Splunk. Unsure how to start troubleshooting the webhook configuration. 

Any guidance will be greatly appreciated 

LOG's 

INFO sendmodalert - Invoking modular alert action=hangsout_chat_alert for search="************" sid="rt_scheduler__******
+0200 ERROR sendmodalert - action=hangsout_chat_alert STDERR - Traceback (most recent call last):
+0200 ERROR sendmodalert - action=hangsout_chat_alert STDERR - File "/opt/splunk/etc/apps/TA-hangsout-chat-webhook/bin/hangsout_chat_alert.py", line 48, in <module>
+0200 ERROR sendmodalert - action=hangsout_chat_alert STDERR - exitcode = AlertActionWorkerhangsout_chat_alert("TA-hangsout-chat-webhook", "hangsout_chat_alert").run(sys.argv)
+0200 ERROR sendmodalert - action=hangsout_chat_alert STDERR - File "/opt/splunk/etc/apps/TA-hangsout-chat-webhook/bin/hangsout_chat_alert.py", line 15, in __init__
+0200 ERROR sendmodalert - action=hangsout_chat_alert STDERR - super(AlertActionWorkerhangsout_chat_alert, self).__init__(ta_name, alert_name)
+0200 ERROR sendmodalert - action=hangsout_chat_alert STDERR - File "/opt/splunk/etc/apps/TA-hangsout-chat-webhook/bin/ta_hangsout_chat_webhook/alert_actions_base.py", line 29, in __init__
+0200 ERROR sendmodalert - action=hangsout_chat_alert STDERR - sys.stdin.read(), self._logger, alert_name)
+0200 ERROR sendmodalert - action=hangsout_chat_alert STDERR - File "/opt/splunk/etc/apps/Splunk_SA_CIM/lib/cim_actions.py", line 157, in __init__
+0200 ERROR sendmodalert - action=hangsout_chat_alert STDERR - if isinstance(self.sid, basestring) and 'scheduler' in self.sid:
+0200 ERROR sendmodalert - action=hangsout_chat_alert STDERR - NameError: name 'basestring' is not defined
+0200 INFO sendmodalert - action=hangsout_chat_alert - Alert action script completed in duration=266 ms with exit code=1
+0200 WARN sendmodalert - action=hangsout_chat_alert - Alert action script returned error code=1

Labels (2)
Tags (2)
0 Karma
1 Solution

Pmeiring
Explorer

Hi All, 

After some investigations I've found the solution seemed to be associated with python version running on the Splunk server. By using a previous version of python I was able to get the webhook working. 

 

<splunk dir>/etc/apps/TA-hangsout-chat-webhook/default/alert_actions.conf

 
[hangsout_chat_alert]
python.version = python2
 
Regards

View solution in original post

Tags (1)
0 Karma

Pmeiring
Explorer

Hi All, 

After some investigations I've found the solution seemed to be associated with python version running on the Splunk server. By using a previous version of python I was able to get the webhook working. 

 

<splunk dir>/etc/apps/TA-hangsout-chat-webhook/default/alert_actions.conf

 
[hangsout_chat_alert]
python.version = python2
 
Regards
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...