Splunk REST API - search call fails on first attempt then runs successfully

burho1 — Tue, 29 Dec 2020 23:29:18 GMT

I'm using this endpoint to run a search and return the SID using Denodo (data virtualization) to make the connection and call.

https://xxxxx.splunk.com:8089/services/search/jobsrun

The first time I run the call, it returns with a connection reset error. Then when I re-run, it returns the SID successfully. I'm able to run it again and get a SID back. It's only after I was a few hours and try to execute the call that I get the connection reset error. Do you know what might be causing this, and how I might overcome the error on the first run.

Re: Splunk REST API - search call fails on first attempt then runs successfully

burho1 — Tue, 29 Dec 2020 23:30:50 GMT

Typo in the original post. This is the endpoint:

https://xxxxx.com:8089/services/search/jobs

topic Splunk REST API - search call fails on first attempt then runs successfully in Splunk Dev

Splunk REST API - search call fails on first attempt then runs successfully

Re: Splunk REST API - search call fails on first attempt then runs successfully