{"action":"created","issue":{"url":"https://api.github.com/repos/sirensolutions/sentinl/issues/439","repository_url":"https://api.github.com/repos/sirensolutions/sentinl","labels_url":"https://api.github.com/repos/sirensolutions/sentinl/issues/439/labels{/name}","comments_url":"https://api.github.com/repos/sirensolutions/sentinl/issues/439/comments","events_url":"https://api.github.com/repos/sirensolutions/sentinl/issues/439/events","html_url":"https://github.com/sirensolutions/sentinl/issues/439","id":327311573,"number":439,"title":"Problem posting big messages to slack with webhook","user":{"login":"koinoyokan17","id":37842639,"avatar_url":"https://avatars3.githubusercontent.com/u/37842639?v=4","gravatar_id":"","url":"https://api.github.com/users/koinoyokan17","html_url":"https://github.com/koinoyokan17","followers_url":"https://api.github.com/users/koinoyokan17/followers","following_url":"https://api.github.com/users/koinoyokan17/following{/other_user}","gists_url":"https://api.github.com/users/koinoyokan17/gists{/gist_id}","starred_url":"https://api.github.com/users/koinoyokan17/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/koinoyokan17/subscriptions","organizations_url":"https://api.github.com/users/koinoyokan17/orgs","repos_url":"https://api.github.com/users/koinoyokan17/repos","events_url":"https://api.github.com/users/koinoyokan17/events{/privacy}","received_events_url":"https://api.github.com/users/koinoyokan17/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-05-29T13:04:26Z","updated_at":"2018-05-29T13:10:54Z","closed_at":null,"author_association":"NONE","body":"<!--\r\nThanks for taking time to report an issue. Please try to:\r\n\r\n* Be precise: describe expected results vs. actual results\r\n* Be clear: explain how to reproduce the problem, step by step\r\n* Include only one problem per report\r\n* Include details about your setup/system/os where possible\r\n\r\nThis section will NOT appear in your Issue report!\r\n-->\r\n\r\n1. Sentinl and Kibana version - 5.6.6\r\n\r\n2. I have a problem with posting big messages using webhook to slack.\r\n\r\n3. Setup action to alert with webhook and try it with big messages.\r\n\r\n4. Expected - i see message in chat. Actual - no message.\r\n\r\n5. Sample of data - \r\n`Error ocured while retire events System.AppfkjgjhnEjhkon: ERROR_RERTTYE ---> System.ERthtrateRTHhrthption: One or more errors occurred. ---> System.ERthtrateRTHhrthption: EWEFOR_ERGTYTH_TIWEFOUT    at Boerl.ERGg.Eefwefwef.Wefwefwffweft.<CrwfefWEfwefc>d__24.LefOn() in C:\\w495t3945t34t5\\7c43ddea66dd549e\\34t5345t\\34t5453t\\34t534t5\\345t435t45\\ErtgrtRttytbrtb.gt:line 103    --- End of inner exception stack trace ---    at System.Threading.Tasks.Task.ThrowIfExceptional(Boolean includeTaskCanceledExceptions)    at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)    at System.Threading.Tasks.Task`1.get_Result()    at Bweerg.Betwergffice.Hawerat.Habiwerost.werdRewerest(weryte[] dwerta, Strwerg enwerintName) in C:\\werg\\Tgewrty\\wet5\\wwerk\\7c43ddewerd549e\\werces\\Infrwercture\\Bewerabwrtat\\HabitatHost.cs:line 186    at Rgerger.BGgreg.Rgerg.Igerrnals.RergoteServergcesMergager.SergdReruest[Teresp](Sering enderintere, Sterng serviceerme, Serng meterodNerme, Oerect[] arers) in C:\\w495t3945t34t5\\7c43ddea66dd549e\\34t5345t\\34t5453t\\34t534t5\\345t435t45\\ErtgrtRttytbrtb.gt:line d9    --- End of inner exception stack trace ---    at Berg.Berice.Heritat.Inerals.ReroteServereserager.erndReerest[Teresp](Sering enderpointNaerme, Serring seericeNaere, erng methodergme, Oerct[] arers) in C:\\w495t3945t34t5\\7c43ddea66dd549e\\34t5345t\\34t5453t\\34t534t5\\345t435t45\\ErtgrtRttytbrtb.gt:line 143    at Beergab.Kerrgqerel.Contqweft.Eveqwefs.qwef2.IKeqwefelqweentqweferviceV2__Pqwexy.GqweftEqwesBySqweqwpe(Keqwelqwrceqwepe sourceqweype)    at Bqwe.OdqweFeeds.Bqwedar.Aqwepter.Evqwents.Evqweqweandlewrbqweqwick(Obqweect qweate) in C:\\w495t3945t34t5\\7c43ddea66dd549e\\34t5345t\\34t5453t\\34t534t5\\345t435t45\\ErtgrtRttytbrtb.gt:line wert51\r\n--`\r\n\r\n6. I've tried to post such messages with curl or your slack action - no problem. If I will use smaller messages - it works.\r\nMy action body - \r\n`{\r\n\"text\" : \"Warning!TEST!\\n\r\n{{#payload.hits.hits}}{{{_source.information}}}{{/payload.hits.hits}}\",\r\n\"attachments\": [{\r\n\t\t\"color\": \"warning\",\r\n\t\t\"title\": \"Details:\",\r\n\t\t\"text\": \"TEST\"\r\n\t}],\r\n\"channel\" : \"#test\",\r\n\"username\" : \"lol\",\r\n\"icon_emoji\" : \":computer:\"\r\n}`\r\n\r\n\r\nhttp://take.ms/3LoxM"},"comment":{"url":"https://api.github.com/repos/sirensolutions/sentinl/issues/comments/392770028","html_url":"https://github.com/sirensolutions/sentinl/issues/439#issuecomment-392770028","issue_url":"https://api.github.com/repos/sirensolutions/sentinl/issues/439","id":392770028,"user":{"login":"lmangani","id":1423657,"avatar_url":"https://avatars1.githubusercontent.com/u/1423657?v=4","gravatar_id":"","url":"https://api.github.com/users/lmangani","html_url":"https://github.com/lmangani","followers_url":"https://api.github.com/users/lmangani/followers","following_url":"https://api.github.com/users/lmangani/following{/other_user}","gists_url":"https://api.github.com/users/lmangani/gists{/gist_id}","starred_url":"https://api.github.com/users/lmangani/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lmangani/subscriptions","organizations_url":"https://api.github.com/users/lmangani/orgs","repos_url":"https://api.github.com/users/lmangani/repos","events_url":"https://api.github.com/users/lmangani/events{/privacy}","received_events_url":"https://api.github.com/users/lmangani/received_events","type":"User","site_admin":false},"created_at":"2018-05-29T13:10:54Z","updated_at":"2018-05-29T13:10:54Z","author_association":"MEMBER","body":"Hi @koinoyokan17 please define \"big\" as accurately as possible. Slack Webhooks have their own limitations and are generally not designed to transmit large payloads... I assume you are already sure you can ship the contents of `_source.information` object to Slack manually in a test and excluded this?"}}
{"actor":{"display_login":"lmangani"}}