All Apps and Add-ons

custom modular alert action app is not working after rename

apraj397
New Member

Hi Team:
I download the app https://splunkbase.splunk.com/app/3596/ from splunk base[this is custom alert action app] and renamed the folder to follow the naming convention. after that I deployed the app into searchhead and getting this error.
Error 1: Not sure where was the issue. I checked spec file and alert action file and all are okay to me.
Checking conf files for problems...
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 9: param.enterpriseSNMPObjectID (value: 1.3.6.1.4.1.27389.100).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 10: param.enterpriseSNMPSpecificObjectID (value: 500).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 11: param.enterpriseSNMPSpecificTrapID (value: 10).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 12: param.customtext (value: 11111).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 13: param.community (value: splunk).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 14: param.serverip (value: host:port).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 15: param.hostname (value: $result.host$).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 16: param.severity (value: 4).
Your indexes and inputs configurations are not internally consistent. For more information, run 'splunk btool check --debug'

Error 2: getting this error when I run the program.

2017-10-17 10:45:53,714 ERROR Execution failed: Traceback (most recent call last):
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/modular_alert.py", line 542, in execute
return self.run(cleaned_params, payload)
File "/opt/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/_netcool_snmpconnector.py", line 36, in run
ntfOrg = ntforg.NotificationOriginator()
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/entity/rfc3413/oneliner/ntforg.py", line 140, in __init
_
self.snmpEngine = snmpEngine or SnmpEngine()
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/pysnmp/entity/engine.py", line 61, in __init_
self.msgAndPduDsp = MsgAndPduDispatcher()
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/pysnmp/proto/rfc3412.py", line 29, in __init_
'SNMP-TARGET-MIB', 'SNMP-USER-BASED-SM-MIB'
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 337, in loadModules
self.loadModule(modName, **userCtx)
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 306, in loadModule
'MIB module \"%s\" load error: %s' % (modPath, traceback.format_exception(*sys.exc_info()))
MibLoadError: MIB module "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/mibs/SNMPv2-MIB.py" load error: ['Traceback (most recent call last):\n', ' File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 301, in loadModule\n exec(modData, g)\n', ' File "", line 13, in \n', ' File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 377, in importSymbols\n \'No module %s loaded at %s\' % (modName, self)\n', 'MibNotFoundError: No module ASN1 loaded at \n'

any help on this.

Note: I have support ticket on this 555946

Tags (1)
0 Karma
1 Solution

jkat54
SplunkTrust
SplunkTrust

Did you remove a README directory with an alert_actions.conf.spec file by chance?

View solution in original post

jkat54
SplunkTrust
SplunkTrust

Did you remove a README directory with an alert_actions.conf.spec file by chance?

apraj397
New Member

yes that was the issue. it works. thank you please close the post and marked as answered

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...