topic How to write data into different sourcetype? in Getting Data In https://community.splunk.com/t5/Getting-Data-In/How-to-write-data-into-different-sourcetype/m-p/383593#M100259 <P>Hello,</P> <P>I am doing an addon, in the addon i am going to get data from multi-endpoints, and write them to different sourcetypes. But the result is: if sequential_mode is 0, it writes the first endpoint's data into all sourcetypes, if sequential_mode is 1, it writes all endpoints' data into all sourcetypes. what's wrong in my config? Is there any other parameters or config files should i have to config? Here is my inputs.conf. Thanks!</P> <P>[test://test.com--424-]<BR /> host = test.com<BR /> endpoint = <A href="https://test.com/api/endpoint_1" target="_blank">https://test.com/api/endpoint_1</A><BR /> cookies = <BR /> http_header_propertys = <BR /> auth_type = oauth2<BR /> oauth2_token_type = Bearer<BR /> oauth2_access_token = <BR /> oauth2_refresh_token = <BR /> oauth2_client_id = <BR /> oauth2_client_secret = <BR /> oauth2_resource_id = <BR /> index_error_response_codes = 0<BR /> index = idx_test<BR /> http_method = GET<BR /> interval = 300<BR /> response_type = json<BR /> disabled = 0<BR /> sequential_mode = 1<BR /> request_timeout = 60<BR /> sourcetype = endpoint_1<BR /> response_handler = testhandler<BR /> streaming_request = 0</P> <P>[test://test.com--703-]<BR /> host = test.com<BR /> endpoint = <A href="https://test/api/endpoint_2" target="_blank">https://test/api/endpoint_2</A><BR /> cookies = <BR /> http_header_propertys = <BR /> auth_type = oauth2<BR /> oauth2_token_type = Bearer<BR /> oauth2_access_token = <BR /> oauth2_refresh_token = <BR /> oauth2_refresh_url = <BR /> oauth2_client_id = <BR /> oauth2_client_secret = <BR /> oauth2_resource_id = <BR /> index_error_response_codes = 0<BR /> index = idx_test<BR /> http_method = GET<BR /> interval = 300<BR /> response_type = json<BR /> disabled = 0<BR /> sequential_mode = 1<BR /> request_timeout = 60<BR /> sourcetype = endpoint_2<BR /> response_handler = testhandler<BR /> streaming_request = 0</P> Tue, 29 Sep 2020 19:59:56 GMT wangzhaoyu 2020-09-29T19:59:56Z How to write data into different sourcetype? https://community.splunk.com/t5/Getting-Data-In/How-to-write-data-into-different-sourcetype/m-p/383593#M100259 <P>Hello,</P> <P>I am doing an addon, in the addon i am going to get data from multi-endpoints, and write them to different sourcetypes. But the result is: if sequential_mode is 0, it writes the first endpoint's data into all sourcetypes, if sequential_mode is 1, it writes all endpoints' data into all sourcetypes. what's wrong in my config? Is there any other parameters or config files should i have to config? Here is my inputs.conf. Thanks!</P> <P>[test://test.com--424-]<BR /> host = test.com<BR /> endpoint = <A href="https://test.com/api/endpoint_1" target="_blank">https://test.com/api/endpoint_1</A><BR /> cookies = <BR /> http_header_propertys = <BR /> auth_type = oauth2<BR /> oauth2_token_type = Bearer<BR /> oauth2_access_token = <BR /> oauth2_refresh_token = <BR /> oauth2_client_id = <BR /> oauth2_client_secret = <BR /> oauth2_resource_id = <BR /> index_error_response_codes = 0<BR /> index = idx_test<BR /> http_method = GET<BR /> interval = 300<BR /> response_type = json<BR /> disabled = 0<BR /> sequential_mode = 1<BR /> request_timeout = 60<BR /> sourcetype = endpoint_1<BR /> response_handler = testhandler<BR /> streaming_request = 0</P> <P>[test://test.com--703-]<BR /> host = test.com<BR /> endpoint = <A href="https://test/api/endpoint_2" target="_blank">https://test/api/endpoint_2</A><BR /> cookies = <BR /> http_header_propertys = <BR /> auth_type = oauth2<BR /> oauth2_token_type = Bearer<BR /> oauth2_access_token = <BR /> oauth2_refresh_token = <BR /> oauth2_refresh_url = <BR /> oauth2_client_id = <BR /> oauth2_client_secret = <BR /> oauth2_resource_id = <BR /> index_error_response_codes = 0<BR /> index = idx_test<BR /> http_method = GET<BR /> interval = 300<BR /> response_type = json<BR /> disabled = 0<BR /> sequential_mode = 1<BR /> request_timeout = 60<BR /> sourcetype = endpoint_2<BR /> response_handler = testhandler<BR /> streaming_request = 0</P> Tue, 29 Sep 2020 19:59:56 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-write-data-into-different-sourcetype/m-p/383593#M100259 wangzhaoyu 2020-09-29T19:59:56Z