All Apps and Add-ons

'str' object has no attribute 'get'  -

g_cremin
Loves-to-Learn

Hello Everyone, I'm trying to create an app in Splunk-SOAR version 6.4.0.92, using miminal code but keeps getting this error 'str' object has no attribute 'get'  -  when I try to install it on the apps section of Splunk-SOAR dashboard.  Can anyone help with this please

Error MessageError Messageapp.jsonapp.json

Screenshot 2025-04-16 163949.png

 

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @g_cremin 

I believe "actions" should be an array of actions, not a dict? This might be affecting things.

...
 "actions": [
    {
        "action":"test_connectivity",
        "identifier": "test_connectivity",
        "description": "Tests connectivity to Wazuh",
        "type": "test",
        "read_only": true,
        "parameters": [],
        "output": []
    }
],
...

For more detail on the app.json schema check out https://docs.splunk.com/Documentation/SOAR/current/DevelopApps/Metadata

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

g_cremin
Loves-to-Learn

Thanking you for replying - I've tried both but throws out a different error.  I was told that splunk-soar version 6.4.0.92 only takes dict { }.  I've attached the error message for the array error...Error message for array [ ]Error message for array [ ]

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...