search

pentestfail / TA-PagerDuty

MIT License
2 stars 2 forks source link

Inputs screen stuck on "Loading.." #2

Open hodgsonsam opened 6 years ago

hodgsonsam commented 6 years ago

Just installed on Splunk 7.0.0 search head and can see the configuration->logging page ok but proxy and inputs just hangs on loading. I see the following after restarting splunk, commenting the line makes no difference:

Invalid key in stanza [pagerduty] in /opt/splunk/etc/apps/pagerduty_incidents/local/alert_actions.conf, line 3: param.integration_url (value: https://events.pagerduty.com/integration/e7264a8698a14a4cb12d1aaf1e934893/enqueue).

It works ok on my indexer server (also splunk 7.0.0) and have tried opening up all ports on the search head to no avail. Is there a log anywhere?

pentestfail commented 6 years ago

There are logs written out to the "_internal" index and the source changes depending on input type used. To see all input types, a query similar to the following should show you all the logs written by the addon.

index=_internal source="*/ta_pagerduty_*.log"

I'm behind in posting updates to this TA, but have patched several issues related to Splunk v7 and will try to get them out soon.