All Apps and Add-ons

REST API Modular Input: Why am I unable to pull API data from this site with my current curl command?

ankumar_juniper
Explorer

I am trying to pull some API data from Site24x7 site. My curl command is as below. I have input these values in REST API Modular Input, but still not getting any data. Mostly I am suspecting the http header properties I am passing. Please help?

curl  "https://www.site24x7.com/api/reports/sla_reports/availability?period={1}" \
                   -X GET -H "Accept: application/json; version=2.0" \
                   -H "Authorization: Zoho-authtoken xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

alt text

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion

Your CURL command has 2 headers defined , and in the stanza you’ve turned this into 3 delimited headers.

So try (notice the “;” after json)

Accept=application/json; version=2.0,Authorization=Zoho-authtoken xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Any errors are in the logs.

Searchable with …….. index=_internal error ExecProcessor rest.py

View solution in original post

0 Karma

Damien_Dallimor
Ultra Champion

Your CURL command has 2 headers defined , and in the stanza you’ve turned this into 3 delimited headers.

So try (notice the “;” after json)

Accept=application/json; version=2.0,Authorization=Zoho-authtoken xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Any errors are in the logs.

Searchable with …….. index=_internal error ExecProcessor rest.py

0 Karma

ankumar_juniper
Explorer

Hi Damien,

I am seeing bad request error in the logs, I am still

09-14-2016 20:21:59.874 -0700 ERROR ExecProcessor - message from "python /data/splunk/etc/apps/rest_ta/bin/rest.py" HTTP Request error: 400 Client Error: Bad Request

HTTP Header Properties:

Accept= application/json; version=2.0,Authorization= Zoho-authtoken xxxxxxxxxxxxxxxxxx

Also tried below, Works in curl, but getting bad request from this app.

Accept= application/json,Authorization= Zoho-authtoken xxxxxxxxxxxxxxxxxx
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...