How to troubleshoot Rest API Modular Input?

[kvaga]

I've installed the application, rebooted Splunk, Configured Data Inputs. But nothing happened. My index is empty. There is no clue in log files under /opt/Splunk/var/logs/Splunk. How can I localize the cause of problem?

[kamlesh_vaghela · Accepted solution]

HI @kvaga,

You can troubleshoot Module Input by

• REST API access
  The Splunk platform provides REST endpoints to access modular inputs installed on a Splunk server. You can access the REST endpoint using the manager port of Splunk Web.

  https://localhost:8089/services/data/modular-inputs
  https://localhost:8089/services/data/modular-inputs/{name}

• Print modular inputs configurations
  Use the Splunk utility, print-modinput-config to print the XML configuration for a modular input. Here is how you call the command for a script named myscript.py with the specified stanza in inputs.conf

  splunk cmd splunkd print-modinput-config myscheme mystanza

Please check following link for detailed information.

https://docs.splunk.com/Documentation/Splunk/7.1.1/AdvancedDev/ModInputsDevTools

Thanks