Splunk Enterprise

Splunk Addon builder error Internal Value can only contain alphanumeric characters and underscores.

Vardhan
Contributor

Hi,

I am trying to build a alert action where I have an drop down with fixed values. But when I am passing the data to  internal value . I am getting error like Internal Value can only contain alphanumeric characters and underscores.  How to resolve this issue can anyone help?

Internal Value: 4-Minor/Localized

Vardhan_0-1627405639862.png

 

 

Labels (2)
0 Karma
1 Solution

Vardhan
Contributor

The workaround solution is to edit the HTML file and pass the internal values with special charachters.

Path to edit: /opt/splunk/etc/app_name/default/ui/nav/alerts/custom_alert.html

<option value="4-Minor/Localized">4-Minor/Localized</option>

View solution in original post

Vardhan
Contributor

The workaround solution is to edit the HTML file and pass the internal values with special charachters.

Path to edit: /opt/splunk/etc/app_name/default/ui/nav/alerts/custom_alert.html

<option value="4-Minor/Localized">4-Minor/Localized</option>

richgalloway
SplunkTrust
SplunkTrust

I'm not an AoB user, but it seems pretty straightforward to me.  Use only alphanumerics and underscores in the "Internal Value" box.  "4_Minor_Localized" in your example.  Since it's internal it doesn't have to be pretty and the lack of special characters will avoid other nasty surprises.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...