All Apps and Add-ons

'str' object has no attribute 'get'  -

g_cremin
Loves-to-Learn

Hello Everyone, I'm trying to create an app in Splunk-SOAR version 6.4.0.92, using miminal code but keeps getting this error 'str' object has no attribute 'get'  -  when I try to install it on the apps section of Splunk-SOAR dashboard.  Can anyone help with this please

Error MessageError Messageapp.jsonapp.json

Screenshot 2025-04-16 163949.png

 

Labels (1)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @g_cremin 

I believe "actions" should be an array of actions, not a dict? This might be affecting things.

...
 "actions": [
    {
        "action":"test_connectivity",
        "identifier": "test_connectivity",
        "description": "Tests connectivity to Wazuh",
        "type": "test",
        "read_only": true,
        "parameters": [],
        "output": []
    }
],
...

For more detail on the app.json schema check out https://docs.splunk.com/Documentation/SOAR/current/DevelopApps/Metadata

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma

g_cremin
Loves-to-Learn

Thanking you for replying - I've tried both but throws out a different error.  I was told that splunk-soar version 6.4.0.92 only takes dict { }.  I've attached the error message for the array error...Error message for array [ ]Error message for array [ ]

0 Karma
Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Building Momentum: Splunk Developer Program at .conf25

At Splunk, developers are at the heart of innovation. That’s why this year at .conf25, we officially launched ...