https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-get-warnings-via-REST-API-when-using-JSON/m-p/68997#M13966 <P>I don't think you will get these warning messages as part of requests to other endpoints than the ones that specifically will give you this information. The ones I imagine would be of relevance to you are:</P> <UL> <LI><CODE>licenser/messages</CODE> <A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/RESTAPI/RESTlicense#licenser.2Fmessages">http://docs.splunk.com/Documentation/Splunk/4.3.4/RESTAPI/RESTlicense#licenser.2Fmessages</A></LI> <LI><CODE>messages</CODE> <A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/RESTAPI/RESTsystem#messages">http://docs.splunk.com/Documentation/Splunk/4.3.4/RESTAPI/RESTsystem#messages</A></LI> </UL> Tue, 25 Sep 2012 06:08:17 GMT Ayn 2012-09-25T06:08:17Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-get-warnings-via-REST-API-when-using-JSON/m-p/68996#M13965 <P>Hi,</P> <P>We recently had a temporary problem with a license configuration which produced warnings when searching in the Splunk UI.</P> <P>Running the same search via the REST API and using output_mode set to 'json' while the warnings were still unresolved resulted in an empty result set ("[]") response rather than any type of error or warning. The search I was running normally would have returned two results.</P> <P>I ran the same search using the default XML output_mode and the same warnings that were in the UI showed up in the XML as &lt;msg type="WARN"&gt; elements.</P> <P>Is there a way to get the warnings to show up in the JSON output which is considerably easier to parse (I'm using Python)? We resolved the cause of the warnings but I don't want to rely on JSON output if it ignores warnings and acts the same as if there were no matches to the search.</P> <P>Thanks in advance!<BR /> --jean</P> Mon, 24 Sep 2012 21:26:22 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-get-warnings-via-REST-API-when-using-JSON/m-p/68996#M13965 JeanA 2012-09-24T21:26:22Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-get-warnings-via-REST-API-when-using-JSON/m-p/68997#M13966 <P>I don't think you will get these warning messages as part of requests to other endpoints than the ones that specifically will give you this information. The ones I imagine would be of relevance to you are:</P> <UL> <LI><CODE>licenser/messages</CODE> <A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/RESTAPI/RESTlicense#licenser.2Fmessages">http://docs.splunk.com/Documentation/Splunk/4.3.4/RESTAPI/RESTlicense#licenser.2Fmessages</A></LI> <LI><CODE>messages</CODE> <A href="http://docs.splunk.com/Documentation/Splunk/4.3.4/RESTAPI/RESTsystem#messages">http://docs.splunk.com/Documentation/Splunk/4.3.4/RESTAPI/RESTsystem#messages</A></LI> </UL> Tue, 25 Sep 2012 06:08:17 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-get-warnings-via-REST-API-when-using-JSON/m-p/68997#M13966 Ayn 2012-09-25T06:08:17Z