Splunk Add-on Builder: Can you help me with Splunk SDK for Python, splunklib.modularinput.EventWriter, event split issue?

[mferjani]

Hi,

I'm facing a random data loss issue when i split an event (list) into many events (one per element).
Here is a snippet of my code :

for element in json_response:
    try:
        data = json.dumps(element)
        event = helper.new_event(data=data, source=source, index=index, sourcetype=sourcetype)
        ew.write_event(event)        
    except Exception as e: 
        raise e

My json_response contains 8 elements. I added counters before and after the for loop. I always got 8 (in log file), but when i try a search for the same time-range, i find only two or one events.

Could you please help ?

Many thanks in advance.

Regards,

--
Mohammed

[chli_splunk]

Did you get some exceptions? Can you post your codes with counters? Any results when you test your codes in AoB? Thanks.