Need help with Slack App for Splunk Addon

Getting Data In

We are using the Slack App for Splunk Addon to capture login and messages data . Slack:Logins are coming in fine however Slack:Messages are having a problem and no data is seen on the index.

Upon checking logs under internal (index=_internal source=*splunkd.log slack *error*) we are seeing the following errors for slack_messages.py

ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-slack/bin/slack_messages.py" ERRORlocal variable 'latest_message' referenced before assignment

ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-slack/bin/slack_messages.py" ERROR: 'channels'

Can anyone help about this issue.

Get Updates on the Splunk Community!

Need help with Slack App for Splunk Addon

inputs.conf

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent

Join the Conversation

Need help with Slack App for Splunk Addon

inputs.conf

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent