Splunk Addon Builder app automatically adds a data input.

[spamarea1]

Addon Builder 4.5.0.

This app adds a data input automatically. This is a good thing, I then go to add new to complete the configuration. Everything is running good.

A few days later, I thought of a better name for the input. I cloned the original, put a different name, and kept all the same config.

I disabled the original.

I noticed that I can still run the script and see the API output, but when I searched for the output, I did not find it. I started to see 401 errors instead. I went back to the data inputs and disabled the clone and enabled the original and all is back to normal.

Is there a rule to cloning the data input for the addon builder that says not to clone?

[livehybrid]

Hi @spamarea1 

Do you have any encrypted fields in the input configuration? It might be that these arent copied when an input is cloned - this might explain why you are getting a 401 error from your API if its missing some credentials/password etc.

If you've clone it, try updating any encrypted value - if appropriate.

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

[spamarea1]

Thanks for replying but no encryption. I used the modular frame of the python script that it gave me as a template.