All Apps and Add-ons

custom modular alert action app is not working after rename

apraj397
New Member

Hi Team:
I download the app https://splunkbase.splunk.com/app/3596/ from splunk base[this is custom alert action app] and renamed the folder to follow the naming convention. after that I deployed the app into searchhead and getting this error.
Error 1: Not sure where was the issue. I checked spec file and alert action file and all are okay to me.
Checking conf files for problems...
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 9: param.enterpriseSNMPObjectID (value: 1.3.6.1.4.1.27389.100).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 10: param.enterpriseSNMPSpecificObjectID (value: 500).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 11: param.enterpriseSNMPSpecificTrapID (value: 10).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 12: param.customtext (value: 11111).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 13: param.community (value: splunk).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 14: param.serverip (value: host:port).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 15: param.hostname (value: $result.host$).
Invalid key in stanza [_netcool_snmpconnector] in /app/JE0/splunk/etc/apps/_netcool_snmpconnector/default/alert_actions.conf, line 16: param.severity (value: 4).
Your indexes and inputs configurations are not internally consistent. For more information, run 'splunk btool check --debug'

Error 2: getting this error when I run the program.

2017-10-17 10:45:53,714 ERROR Execution failed: Traceback (most recent call last):
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/modular_alert.py", line 542, in execute
return self.run(cleaned_params, payload)
File "/opt/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/_netcool_snmpconnector.py", line 36, in run
ntfOrg = ntforg.NotificationOriginator()
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/entity/rfc3413/oneliner/ntforg.py", line 140, in __init
_
self.snmpEngine = snmpEngine or SnmpEngine()
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/pysnmp/entity/engine.py", line 61, in __init_
self.msgAndPduDsp = MsgAndPduDispatcher()
File "/app/JE0/splunk/etc/apps/netcool_snmpconnector_systest-us/bin/pysnmp/proto/rfc3412.py", line 29, in __init_
'SNMP-TARGET-MIB', 'SNMP-USER-BASED-SM-MIB'
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 337, in loadModules
self.loadModule(modName, **userCtx)
File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 306, in loadModule
'MIB module \"%s\" load error: %s' % (modPath, traceback.format_exception(*sys.exc_info()))
MibLoadError: MIB module "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/mibs/SNMPv2-MIB.py" load error: ['Traceback (most recent call last):\n', ' File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 301, in loadModule\n exec(modData, g)\n', ' File "", line 13, in \n', ' File "/app/JE0/splunk/etc/apps/_netcool_snmpconnector_systest-us/bin/pysnmp/smi/builder.py", line 377, in importSymbols\n \'No module %s loaded at %s\' % (modName, self)\n', 'MibNotFoundError: No module ASN1 loaded at \n'

any help on this.

Note: I have support ticket on this 555946

Tags (1)
0 Karma
1 Solution

jkat54
SplunkTrust
SplunkTrust

Did you remove a README directory with an alert_actions.conf.spec file by chance?

View solution in original post

jkat54
SplunkTrust
SplunkTrust

Did you remove a README directory with an alert_actions.conf.spec file by chance?

apraj397
New Member

yes that was the issue. it works. thank you please close the post and marked as answered

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...