All Apps and Add-ons

'str' object has no attribute 'get'  -

g_cremin
Loves-to-Learn

Hello Everyone, I'm trying to create an app in Splunk-SOAR version 6.4.0.92, using miminal code but keeps getting this error 'str' object has no attribute 'get'  -  when I try to install it on the apps section of Splunk-SOAR dashboard.  Can anyone help with this please

Error MessageError Messageapp.jsonapp.json

Screenshot 2025-04-16 163949.png

 

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @g_cremin 

I believe "actions" should be an array of actions, not a dict? This might be affecting things.

...
 "actions": [
    {
        "action":"test_connectivity",
        "identifier": "test_connectivity",
        "description": "Tests connectivity to Wazuh",
        "type": "test",
        "read_only": true,
        "parameters": [],
        "output": []
    }
],
...

For more detail on the app.json schema check out https://docs.splunk.com/Documentation/SOAR/current/DevelopApps/Metadata

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

g_cremin
Loves-to-Learn

Thanking you for replying - I've tried both but throws out a different error.  I was told that splunk-soar version 6.4.0.92 only takes dict { }.  I've attached the error message for the array error...Error message for array [ ]Error message for array [ ]

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...