https://community.splunk.com/t5/Getting-Data-In/How-to-filter-data-coming-through-Splunk-Rest-modular-input/m-p/380677#M68701 <P>The REST modinput would obey to the same parsing principles. What data are you trying to parse?</P> Tue, 09 Jul 2019 08:00:47 GMT tiagofbmm 2019-07-09T08:00:47Z https://community.splunk.com/t5/Getting-Data-In/How-to-filter-data-coming-through-Splunk-Rest-modular-input/m-p/380676#M68700 <P>Hi All,</P> <P>I have created REST modular inputs to collect data from REST API.<BR /> I am using delimiters,"impact=1" ,Polling interval 3600 sec but still no luck.<BR /> All the data from the REST API is coming in the SPLUNK index without any impact. </P> Mon, 08 Jul 2019 13:30:16 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-filter-data-coming-through-Splunk-Rest-modular-input/m-p/380676#M68700 aritratony 2019-07-08T13:30:16Z https://community.splunk.com/t5/Getting-Data-In/How-to-filter-data-coming-through-Splunk-Rest-modular-input/m-p/380677#M68701 <P>The REST modinput would obey to the same parsing principles. What data are you trying to parse?</P> Tue, 09 Jul 2019 08:00:47 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-filter-data-coming-through-Splunk-Rest-modular-input/m-p/380677#M68701 tiagofbmm 2019-07-09T08:00:47Z https://community.splunk.com/t5/Getting-Data-In/How-to-filter-data-coming-through-Splunk-Rest-modular-input/m-p/380678#M68702 <P>Hi tiagofbmm,</P> <P>I am using REST API of ServiceNow Incidents.the response is coming in JSON format.</P> <P>Below are defined for the REST input(Data inputs » REST)</P> <P>In the delimiters I am defining the field value().<BR /> Also in Polling Intervals(3600) been defined.</P> <P>But this does not seem to be working at all.</P> <P>and same data is getting inserted in the index after 60 seconds intervals</P> Wed, 10 Jul 2019 11:49:00 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-filter-data-coming-through-Splunk-Rest-modular-input/m-p/380678#M68702 aritratony 2019-07-10T11:49:00Z