Splunk Dev

Error dispatching job in splunk API

ngvella
Explorer

I get the following error trying to dispatch a saved job via Python and curl:


In handler 'savedsearch': Invalid custom action for this internal handler (handler: savedsearch, custom action: dispatch, eai action: list).

url = baseurl+'services/saved/searches/'+jobname+'/dispatch'

Anyone know what's causing this?

Tags (4)

sentineltarget
Engager

Did you find a solution for this?

0 Karma

robertlight
Path Finder

I am getting something very similar - it started occurring after I installed a new license (or perhaps it started after I converted to the "free-version" for a short period before I installed the new license.

Please post any solutions you found with your problem.

My error message:

In handler 'savedsearch': Invalid custom action for this internal handler (handler: savedsearch, custom action: action.email.to, eai action: list).

0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...