<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic REST API Modular Input add on stopped reading data in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/REST-API-Modular-Input-add-on-stopped-reading-data/m-p/552144#M91628</link>
    <description>&lt;P&gt;i am using REST API Modular Input add on to ingest data from PRTG in JSON format which was working fine until yesterday when i tried to add some more configs to better process the data (props.conf and inputs.conf - a minor change in the endpoint). but strangely the data ingest stopped after the change, the endpoint query works fine since its working in the browser, checked splunkd logs as well there is nothing much that i can see from the time the data stopped coming in, did anyone face similar issues earlier?&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;DIV class="p-rich_text_section"&gt;this is my inputs.conf&lt;/DIV&gt;&lt;PRE&gt;[&lt;A href="rest://PRTG_" target="_blank" rel="noopener noreferrer"&gt;rest://PRTG_&lt;/A&gt;&amp;lt;IP&amp;gt;]&lt;BR /&gt;activation_key = &amp;lt;key&amp;gt;&lt;BR /&gt;auth_password = &amp;lt;username&amp;gt;&lt;BR /&gt;auth_type = basic&lt;BR /&gt;auth_user = &amp;lt;password&amp;gt;&lt;BR /&gt;endpoint = https://&amp;lt;IP&amp;gt;/api/table.json?content=sensors&amp;amp;output=json&amp;amp;columns=objid,probe,group,device,host,sensor,status,message,lastvalue,priority&amp;amp;count=100&amp;amp;username=&amp;lt;user&amp;gt;&amp;amp;passhash=&amp;lt;pass&amp;gt;&lt;BR /&gt;host = &amp;lt;ip&amp;gt;&lt;BR /&gt;http_method = GET&lt;BR /&gt;index = prtg&lt;BR /&gt;index_error_response_codes = 0&lt;BR /&gt;log_level = INFO&lt;BR /&gt;response_type = json&lt;BR /&gt;sequential_mode = 0&lt;BR /&gt;sourcetype = mysourcetype&lt;BR /&gt;streaming_request = 0&lt;BR /&gt;disabled = 0&lt;/PRE&gt;&lt;DIV class="p-rich_text_section"&gt;this is the props.conf&lt;/DIV&gt;&lt;PRE&gt;[mysourcetype]&lt;BR /&gt;KV_MODE = JSON&lt;/PRE&gt;</description>
    <pubDate>Wed, 19 May 2021 08:26:22 GMT</pubDate>
    <dc:creator>soumyasaha25</dc:creator>
    <dc:date>2021-05-19T08:26:22Z</dc:date>
    <item>
      <title>REST API Modular Input add on stopped reading data</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/REST-API-Modular-Input-add-on-stopped-reading-data/m-p/552144#M91628</link>
      <description>&lt;P&gt;i am using REST API Modular Input add on to ingest data from PRTG in JSON format which was working fine until yesterday when i tried to add some more configs to better process the data (props.conf and inputs.conf - a minor change in the endpoint). but strangely the data ingest stopped after the change, the endpoint query works fine since its working in the browser, checked splunkd logs as well there is nothing much that i can see from the time the data stopped coming in, did anyone face similar issues earlier?&lt;BR /&gt;&lt;BR /&gt;&lt;/P&gt;&lt;DIV class="p-rich_text_section"&gt;this is my inputs.conf&lt;/DIV&gt;&lt;PRE&gt;[&lt;A href="rest://PRTG_" target="_blank" rel="noopener noreferrer"&gt;rest://PRTG_&lt;/A&gt;&amp;lt;IP&amp;gt;]&lt;BR /&gt;activation_key = &amp;lt;key&amp;gt;&lt;BR /&gt;auth_password = &amp;lt;username&amp;gt;&lt;BR /&gt;auth_type = basic&lt;BR /&gt;auth_user = &amp;lt;password&amp;gt;&lt;BR /&gt;endpoint = https://&amp;lt;IP&amp;gt;/api/table.json?content=sensors&amp;amp;output=json&amp;amp;columns=objid,probe,group,device,host,sensor,status,message,lastvalue,priority&amp;amp;count=100&amp;amp;username=&amp;lt;user&amp;gt;&amp;amp;passhash=&amp;lt;pass&amp;gt;&lt;BR /&gt;host = &amp;lt;ip&amp;gt;&lt;BR /&gt;http_method = GET&lt;BR /&gt;index = prtg&lt;BR /&gt;index_error_response_codes = 0&lt;BR /&gt;log_level = INFO&lt;BR /&gt;response_type = json&lt;BR /&gt;sequential_mode = 0&lt;BR /&gt;sourcetype = mysourcetype&lt;BR /&gt;streaming_request = 0&lt;BR /&gt;disabled = 0&lt;/PRE&gt;&lt;DIV class="p-rich_text_section"&gt;this is the props.conf&lt;/DIV&gt;&lt;PRE&gt;[mysourcetype]&lt;BR /&gt;KV_MODE = JSON&lt;/PRE&gt;</description>
      <pubDate>Wed, 19 May 2021 08:26:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/REST-API-Modular-Input-add-on-stopped-reading-data/m-p/552144#M91628</guid>
      <dc:creator>soumyasaha25</dc:creator>
      <dc:date>2021-05-19T08:26:22Z</dc:date>
    </item>
  </channel>
</rss>

