<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic API /timeserieswindow endpoint returns 400 in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/API-timeserieswindow-endpoint-returns-400/m-p/666350#M228597</link>
    <description>&lt;P&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;When I call:&lt;BR /&gt;&lt;A href="https://api.{REALM}.signalfx.com/v1/timeserieswindow" target="_blank" rel="noopener"&gt;https://api.{REALM}.signalfx.com/v1/timeserieswindow&lt;/A&gt;&lt;BR /&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;H4&gt;&lt;BR /&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;with my access token as header:&amp;nbsp;X-SF-TOKEN&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;P&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;I receive:&lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;{&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;"message"&lt;SPAN&gt;: &lt;SPAN&gt;"API Error: 400"&lt;SPAN&gt;,&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;"status"&lt;SPAN&gt;: &lt;SPAN&gt;400&lt;SPAN&gt;,&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;"type"&lt;SPAN&gt;: &lt;SPAN&gt;"error"&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;}&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&amp;nbsp;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;The same happens when I add parameters to request:&lt;BR /&gt;&lt;A href="https://api.{REALM}.signalfx.com/v1/timeserieswindow?query=sf_metric" target="_blank" rel="noopener"&gt;https://api.{REALM}.signalfx.com/v1/timeserieswindow?query=sf_metric:"jvm.cpu.load"&amp;amp;startMs=1489410900000&amp;amp;endMs=1489411205000&lt;BR /&gt;&lt;/A&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&amp;nbsp;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;Am I missing something?&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;</description>
    <pubDate>Thu, 26 Oct 2023 12:51:07 GMT</pubDate>
    <dc:creator>PiotrSekula</dc:creator>
    <dc:date>2023-10-26T12:51:07Z</dc:date>
    <item>
      <title>API /timeserieswindow endpoint returns 400</title>
      <link>https://community.splunk.com/t5/Splunk-Search/API-timeserieswindow-endpoint-returns-400/m-p/666350#M228597</link>
      <description>&lt;P&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;When I call:&lt;BR /&gt;&lt;A href="https://api.{REALM}.signalfx.com/v1/timeserieswindow" target="_blank" rel="noopener"&gt;https://api.{REALM}.signalfx.com/v1/timeserieswindow&lt;/A&gt;&lt;BR /&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;H4&gt;&lt;BR /&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;with my access token as header:&amp;nbsp;X-SF-TOKEN&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/H4&gt;&lt;P&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;I receive:&lt;BR /&gt;&lt;BR /&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;DIV&gt;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;{&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;"message"&lt;SPAN&gt;: &lt;SPAN&gt;"API Error: 400"&lt;SPAN&gt;,&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;"status"&lt;SPAN&gt;: &lt;SPAN&gt;400&lt;SPAN&gt;,&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;"type"&lt;SPAN&gt;: &lt;SPAN&gt;"error"&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;}&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&amp;nbsp;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;The same happens when I add parameters to request:&lt;BR /&gt;&lt;A href="https://api.{REALM}.signalfx.com/v1/timeserieswindow?query=sf_metric" target="_blank" rel="noopener"&gt;https://api.{REALM}.signalfx.com/v1/timeserieswindow?query=sf_metric:"jvm.cpu.load"&amp;amp;startMs=1489410900000&amp;amp;endMs=1489411205000&lt;BR /&gt;&lt;/A&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/FONT&gt;&lt;DIV&gt;&amp;nbsp;&lt;DIV&gt;&lt;FONT face="arial,helvetica,sans-serif" color="#000000"&gt;&lt;SPAN&gt;Am I missing something?&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;&lt;/DIV&gt;</description>
      <pubDate>Thu, 26 Oct 2023 12:51:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/API-timeserieswindow-endpoint-returns-400/m-p/666350#M228597</guid>
      <dc:creator>PiotrSekula</dc:creator>
      <dc:date>2023-10-26T12:51:07Z</dc:date>
    </item>
  </channel>
</rss>

