All Apps and Add-ons

custom modular alert action app is not working after rename

apraj397
New Member

Hi Team:
I download the app https://splunkbase.splunk.com/app/3596/ from splunk base[this is custom alert action app] and renamed the folder to follow the naming convention. after that I deployed the app into searchhead and getting this error.
Error 1: Not sure where was the issue. I checked spec file and alert action file and all are okay to me.
Checking conf files for problems...
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 9: param.enterpriseSNMPObjectID (value: 1.3.6.1.4.1.27389.100).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 10: param.enterpriseSNMPSpecificObjectID (value: 500).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 11: param.enterpriseSNMPSpecificTrapID (value: 10).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 12: param.customtext (value: 11111).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 13: param.community (value: splunk).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 14: param.serverip (value: host:port).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 15: param.hostname (value: $result.host$).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 16: param.severity (value: 4).
Your indexes and inputs configurations are not internally consistent. For more information, run 'splunk btool check --debug'

Error 2: getting this error when I run the program.

2017-10-17 10:45:53,714 ERROR Execution failed: Traceback (most recent call last):
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/modular_alert.py", line 542, in execute
return self.run(cleaned_params, payload)
File "/opt/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/_netcool_snmpconnector.py", line 36, in run
ntfOrg = ntforg.NotificationOriginator()
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/entity/rfc3413/oneliner/ntforg.py", line 140, in __init
_
self.snmpEngine = snmpEngine or SnmpEngine()
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/pysnmp/entity/engine.py", line 61, in __init_
self.msgAndPduDsp = MsgAndPduDispatcher()
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/pysnmp/proto/rfc3412.py", line 29, in __init_
'SNMP-TARGET-MIB', 'SNMP-USER-BASED-SM-MIB'
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 337, in loadModules
self.loadModule(modName, **userCtx)
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 306, in loadModule
'MIB module \"%s\" load error: %s' % (modPath, traceback.format_exception(*sys.exc_info()))
MibLoadError: MIB module "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/mibs/SNMPv2-MIB.py" load error: ['Traceback (most recent call last):\n', ' File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 301, in loadModule\n exec(modData, g)\n', ' File "", line 13, in \n', ' File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 377, in importSymbols\n \'No module %s loaded at %s\' % (modName, self)\n', 'MibNotFoundError: No module ASN1 loaded at \n'

any help on this.

Note: I have support ticket on this 555946

Tags (1)
0 Karma
1 Solution

jkat54
SplunkTrust
SplunkTrust

Did you remove a README directory with an alert_actions.conf.spec file by chance?

View solution in original post

jkat54
SplunkTrust
SplunkTrust

Did you remove a README directory with an alert_actions.conf.spec file by chance?

apraj397
New Member

yes that was the issue. it works. thank you please close the post and marked as answered

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...