Getting Data In

Slack notification error code 1

Alicynx
New Member

I'm trying to get Slack alerts set on my Splunk Cloud instance but the test give me the following output:

04-14-2023 21:50:28.461 INFO  sendmodalert [11674 phase_1] - action=slack STDERR -  Slack API responded with HTTP status=200
04-14-2023 21:50:28.461 FATAL sendmodalert [11674 phase_1] - action=slack STDERR -  Alert action failed
04-14-2023 21:50:28.493 INFO  sendmodalert [11674 phase_1] - action=slack - Alert action script completed in duration=171 ms with exit code=1
04-14-2023 21:50:28.493 WARN  sendmodalert [11674 phase_1] - action=slack - Alert action script returned error code=1
04-14-2023 21:50:28.493 ERROR sendmodalert [11674 phase_1] - Error in 'sendalert' command: Alert script returned error code 1.
04-14-2023 21:50:28.494 INFO  ReducePhaseExecutor [11674 phase_1] - Ending phase_1

 

I can't find the meaning of error code 1 anywhere, and can't put this setup in debug to get more info from the deployment. Does anyone have an idea of what this code means so I can get this functional?

0 Karma

vn_g
Path Finder

Error Message : WARN sendmodalert [3050674 AlertNotifierWorker-0] - action=slack - Alert action script returned error code=1

 

Even I am getting the same error, Was this resolved? What was the fix?

What does this error mean? No documentation in git link as well.

Tags (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...

Splunk Developers: Construct Your Future at the .conf26 Builder Bar

Calling all Splunk architects, platform admins, and app developers: the site is open, and the blueprints are ...

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...