diff --git a/keep/providers/splunk_provider/splunk_provider.py b/keep/providers/splunk_provider/splunk_provider.py index 41c219310..d0b6c6db0 100644 --- a/keep/providers/splunk_provider/splunk_provider.py +++ b/keep/providers/splunk_provider/splunk_provider.py @@ -156,7 +156,12 @@ def _format_alert( try: raw: str = event.get("_raw", "{}") raw_dict: dict = json.loads(raw) - except Exception: + except Exception as e: + logger = logging.getLogger(__name__) + logger.warning( + "Error parsing _raw attribute from event", + extra={"err": e, "_raw": event.get("_raw")}, + ) raw_dict = {} # export k8s specifics