Splunk Dev

Error dispatching job in splunk API

ngvella
Explorer

I get the following error trying to dispatch a saved job via Python and curl:


In handler 'savedsearch': Invalid custom action for this internal handler (handler: savedsearch, custom action: dispatch, eai action: list).

url = baseurl+'services/saved/searches/'+jobname+'/dispatch'

Anyone know what's causing this?

Tags (4)

sentineltarget
Engager

Did you find a solution for this?

0 Karma

robertlight
Path Finder

I am getting something very similar - it started occurring after I installed a new license (or perhaps it started after I converted to the "free-version" for a short period before I installed the new license.

Please post any solutions you found with your problem.

My error message:

In handler 'savedsearch': Invalid custom action for this internal handler (handler: savedsearch, custom action: action.email.to, eai action: list).

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...

Updated Data Management and AWS GDI Inventory in Splunk Observability

We’re making some changes to Data Management and Infrastructure Inventory for AWS. The Data Management page, ...