Splunk ITSI

ERROR sendmodalert - Error in 'sendalert' command: Alert script returned error code 255.

jslee
Explorer

I create correlation search and set in ITSI App. But did not appear Notable Events Review to review notable events.

I get these errors:
05-04-2018 12:43:32.008 +0900 ERROR SearchScheduler - Error in 'sendalert' command: Alert script returned error code 255.,
05-04-2018 12:44:19.635 +0900 ERROR sendmodalert - action=itsi_event_generator STDERR - AuthenticationError: Autologin succeeded, but there was an auth error on next request. Something is very wrong.

ITSI Version : 3.1
Splunk Enterprise Verion :7.1

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...