All Apps and Add-ons

Why does the Slack Webhook Alert Add-On only works with Admin permissions?

jbaileytempus
New Member

Hello,

We have some alerts setup using the Slack Webhook Alert Add-On, however after some testing, we have found that only Admins have the ability to create alerts that successfully use this alert action. I setup the permissions on the alert action so that the role of my non-admin users(default power role) has write access, but this still did not allow the alerts to fire. The error that is displayed in the logs is:

INFO sendmodalert - action=slack_webhook_alert - Alert action script completed in duration=8042 ms with exit code=5
WARN sendmodalert - action=slack_webhook_alert - Alert action script returned error code=5

Any help in figuring out what permissions are needed in order to allow my users to create and manage their own alerts without providing admin privileges would be very appreciated.

Thanks

0 Karma
1 Solution

sjodle
Path Finder

Check the permissions on your stored credential objects. They must be shared either globally or within the slack_webhook_alert app.

View solution in original post

0 Karma

sjodle
Path Finder

Check the permissions on your stored credential objects. They must be shared either globally or within the slack_webhook_alert app.

0 Karma

jbaileytempus
New Member

ty, i did find the permission error in the logs eventually(i had been looking in the wrong logs) and it was failing on trying to list_storage_passwords

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...