All Apps and Add-ons

TA-WebTools

Kendo213
Communicator

I've installed this on a Splunk box running 7.3.1. Initially, the first scheduled CURL input worked, with a simple URI of the following:

https://api.ssllabs.com/api/v3/analyze?host=mydomain.com

I cloned this input, changing the domain in the URI, and the additional input didn't function. I deleted all inputs, and tried again, and still wasn't successful. I've also removed the Webtools app, and re-installed it, which didn't work. I do see these errors in the internal logs, if they're helpful:

2020-01-21 10:09:07,236 ERROR pid=115445 tid=MainThread file=base_modinput.py:log_error:307 | Get error when collecting events.
Traceback (most recent call last):
File "/opt/splunk/etc/apps/TA-webtools/bin/ta_webtools/modinput_wrapper/base_modinput.py", line 127, in stream_events
self.collect_events(ew)
File "/opt/splunk/etc/apps/TA-webtools/bin/curl_inputs.py", line 88, in collect_events
input_module.collect_events(self, ew)
File "/opt/splunk/etc/apps/TA-webtools/bin/input_module_curl_inputs.py", line 43, in collect_events
if len(payload)>0:
TypeError: object of type 'NoneType' has no len()

Running curl with SPL does work correctly, and one of the inputs did work at one point. I'm not inserting any headers, or anything special.

Any ideas?

0 Karma

Kendo213
Communicator

Yeah - that was my first check - but I can do the curl from the server, or with SPL via this add-on from the same device. I'm assuming it isn't that based on testing.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...