# encoding = utf-8 # Always put this line at the beginning of this file import import_declare_test import os import sys from splunktaucclib.alert_actions_base import ModularAlertBase import modalert_trackme_auto_ack_helper class AlertActionWorkertrackme_auto_ack(ModularAlertBase): def __init__(self, ta_name, alert_name): super(AlertActionWorkertrackme_auto_ack, self).__init__(ta_name, alert_name) def validate_params(self): if not self.get_param("ack_period"): self.log_error( "ack_period is a mandatory parameter, but its value is None." ) return False return True def process_event(self, *args, **kwargs): status = 0 try: if not self.validate_params(): return 3 status = modalert_trackme_auto_ack_helper.process_event( self, *args, **kwargs ) except (AttributeError, TypeError) as ae: self.log_error( f"Error: {str(ae)}. Please double check spelling and also verify that a compatible version of Splunk_SA_CIM is installed." ) return 4 except Exception as e: msg = "Unexpected error: {}." if str(e): self.log_error( f"Unexpected error: {str(e)}." ) # e.message replaced with str(ae) else: import traceback self.log_error(f"Unexpected error: {traceback.format_exc()}.") return 5 return status if __name__ == "__main__": exitcode = AlertActionWorkertrackme_auto_ack("trackme", "trackme_auto_ack").run( sys.argv ) sys.exit(exitcode)