All Apps and Add-ons

custom modular alert action app is not working after rename

apraj397
New Member

Hi Team:
I download the app https://splunkbase.splunk.com/app/3596/ from splunk base[this is custom alert action app] and renamed the folder to follow the naming convention. after that I deployed the app into searchhead and getting this error.
Error 1: Not sure where was the issue. I checked spec file and alert action file and all are okay to me.
Checking conf files for problems...
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 9: param.enterpriseSNMPObjectID (value: 1.3.6.1.4.1.27389.100).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 10: param.enterpriseSNMPSpecificObjectID (value: 500).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 11: param.enterpriseSNMPSpecificTrapID (value: 10).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 12: param.customtext (value: 11111).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 13: param.community (value: splunk).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 14: param.serverip (value: host:port).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 15: param.hostname (value: $result.host$).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 16: param.severity (value: 4).
Your indexes and inputs configurations are not internally consistent. For more information, run 'splunk btool check --debug'

Error 2: getting this error when I run the program.

2017-10-17 10:45:53,714 ERROR Execution failed: Traceback (most recent call last):
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/modular_alert.py", line 542, in execute
return self.run(cleaned_params, payload)
File "/opt/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/_netcool_snmpconnector.py", line 36, in run
ntfOrg = ntforg.NotificationOriginator()
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/entity/rfc3413/oneliner/ntforg.py", line 140, in __init
_
self.snmpEngine = snmpEngine or SnmpEngine()
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/pysnmp/entity/engine.py", line 61, in __init_
self.msgAndPduDsp = MsgAndPduDispatcher()
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/pysnmp/proto/rfc3412.py", line 29, in __init_
'SNMP-TARGET-MIB', 'SNMP-USER-BASED-SM-MIB'
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 337, in loadModules
self.loadModule(modName, **userCtx)
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 306, in loadModule
'MIB module \"%s\" load error: %s' % (modPath, traceback.format_exception(*sys.exc_info()))
MibLoadError: MIB module "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/mibs/SNMPv2-MIB.py" load error: ['Traceback (most recent call last):\n', ' File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 301, in loadModule\n exec(modData, g)\n', ' File "", line 13, in \n', ' File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 377, in importSymbols\n \'No module %s loaded at %s\' % (modName, self)\n', 'MibNotFoundError: No module ASN1 loaded at \n'

any help on this.

Note: I have support ticket on this 555946

Tags (1)
0 Karma
1 Solution

jkat54
SplunkTrust
SplunkTrust

Did you remove a README directory with an alert_actions.conf.spec file by chance?

View solution in original post

jkat54
SplunkTrust
SplunkTrust

Did you remove a README directory with an alert_actions.conf.spec file by chance?

apraj397
New Member

yes that was the issue. it works. thank you please close the post and marked as answered

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...