Hi all, I get the following error under the index=_internal and the jira ticket is not created. WARN sendmodalert [28064 AlertNotifierWorker-0] - action=jira_service_desk_replay - Alert action script returned error code=4 Do you have any idea what the problem might be?
... View more
i think it really depends on your use case. typically i would prefer to use the native splunk scheduling, but 150+ near identical reports reports being run on the first of each month, interfering with interactive splunk users, and occasionally exhausting cluster resources was not ideal. im using a scheduled ci-cd process that executes this job in a docker container.
... View more
Hi @tam82 and @splunknewbie, as you can read at https://docs.splunk.com/Documentation/Splunk/9.0.0/Admin/Inputsconf, it's possible to assign a field value using _meta, but why do you want to do this? Ciao. Giuseppe
... View more