https://community.splunk.com/t5/Splunk-Dev/Handling-big-json-response-from-REST-API-when-using-REST-API/m-p/451098#M8182 <P>Hi all,</P> <P>Our REST API response in json is quite big and chunky about 6000 line (more than 1000 items and about 200KB).<BR /> I need to use this endpoint to get data in. <BR /> In the Data Input REST settings, I have specified json as the source type. <BR /> The problem is that just a small portion of the json response is being present as an event, and the fields are not extracted correctly.<BR /> Therefore I cannot use the json data, spath is not wotking etc.</P> <P>IS there a way to get around this, or I need to have a smaller json response.<BR /> Please help.<BR /> Thanks.</P> Fri, 10 May 2019 15:03:30 GMT beetaj 2019-05-10T15:03:30Z https://community.splunk.com/t5/Splunk-Dev/Handling-big-json-response-from-REST-API-when-using-REST-API/m-p/451098#M8182 <P>Hi all,</P> <P>Our REST API response in json is quite big and chunky about 6000 line (more than 1000 items and about 200KB).<BR /> I need to use this endpoint to get data in. <BR /> In the Data Input REST settings, I have specified json as the source type. <BR /> The problem is that just a small portion of the json response is being present as an event, and the fields are not extracted correctly.<BR /> Therefore I cannot use the json data, spath is not wotking etc.</P> <P>IS there a way to get around this, or I need to have a smaller json response.<BR /> Please help.<BR /> Thanks.</P> Fri, 10 May 2019 15:03:30 GMT https://community.splunk.com/t5/Splunk-Dev/Handling-big-json-response-from-REST-API-when-using-REST-API/m-p/451098#M8182 beetaj 2019-05-10T15:03:30Z