Splunk ITSI

ERROR sendmodalert - Error in 'sendalert' command: Alert script returned error code 255.

jslee
Explorer

I create correlation search and set in ITSI App. But did not appear Notable Events Review to review notable events.

I get these errors:
05-04-2018 12:43:32.008 +0900 ERROR SearchScheduler - Error in 'sendalert' command: Alert script returned error code 255.,
05-04-2018 12:44:19.635 +0900 ERROR sendmodalert - action=itsi_event_generator STDERR - AuthenticationError: Autologin succeeded, but there was an auth error on next request. Something is very wrong.

ITSI Version : 3.1
Splunk Enterprise Verion :7.1

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...