All Apps and Add-ons

REST API Modular Input: Are there limits for large JSON Arrays?

panovattack
Communicator

I am trying to download JSON Arrays where one of the data elements contains are large volume of HTML encoded data. In around 50% of the cases (for the larger records), the JSON Array Handler does write the whole record. Any ideas? are there limits set in the JSON Array Handler that can be fixed? Also tried increasing limits on the SPATH extractor, but it appears the whole records is not being written.

0 Karma

cesaccenturefed
Path Finder

any updates on this. were seeing odd missing data when we do w real time api call, its missing data. but when we do a historical call for the same data the information is there. would like to rule out any truncation or limits settings.

0 Karma

panovattack
Communicator

I still have the same problem. No resolution.

0 Karma

jgcsco
Path Finder

I am seeing similar issue with 6.6.1. Are there any resolution?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...