Alerting

User getting "Argument "action.email" is not supported by this handler" when creating alert

paimonsoror
Builder

I was wondering if anyone else has come across this problem? Seems to be affecting this one user. He is unable to schedule a report, or create an alert.

Scheduling a report doesn't pop any errors, but after he schedules, he can go back to the edit schedule screen, and it doesn't show that it has actually been scheduled.

When he goes to create an alert with an email, he gets the following error:

Argument "action.email" is not supported by this handler. 

and i see the following in the splunkd log, but nothing seems to come before/after to help

08-02-2017 15:57:07.026 -0400 ERROR AdminManager - Argument "action.email" is not supported by this handler.

It doesn't seem like other users are affected, and this user is in the appropriate 'power' group to be able to create alerts/schedule searches.

0 Karma
1 Solution

paimonsoror
Builder

Interesting. Not too sure this is the "answer", but a restart of the SH cluster seems to have fixed this.

View solution in original post

rodrigorsilva
Communicator

I had the same issue, in my case I solved after configure specific capabilities for this role.

edit_search_scheduler

I hope this will help.

Rodrigo Ribeiro

ghollmann
Engager

I know this post is old, but this just worked for me!

0 Karma

paimonsoror
Builder

Interesting. Not too sure this is the "answer", but a restart of the SH cluster seems to have fixed this.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...