All Apps and Add-ons

TA-Webtools - Why am I getting the error CURL invalid json in request?

glouka_tp
Loves-to-Learn Everything

Hello,

I'm trying to run the following:

 

| makeresults count=1

| eval data = "{\"something\":\"something\",\"something\":\"something\",\"something\":\"something\"}"

| eval header = "{\"header-api-key\":\"something\"}"

| curl  method=post  uri="https://api.something/v2" headerfield=header  data=data debug=t verifyssl=false

| table  *

 

and I'm getting

"{"status": "error", "result": "Invalid json format in the request".

Also I tried to add

"{\"content-type\":\"application/json\"}" like :

 

| eval header = "{"{\"content-type\":\"application/json\"}",\"header-api-key\":\"something\"}"

 

but I get the some error. Note that I have the latest version of TA-webtools

Anyone has any suggestions? 

Thank in advance 

Labels (1)
Tags (4)
0 Karma

gjanders
SplunkTrust
SplunkTrust

Try datafield=data

 

| curl  method=post  uri="https://api.something/v2" headerfield=header  datafield=data debug=t verifyssl=false

 

0 Karma

glouka_tp
Loves-to-Learn Everything

Same error as before

0 Karma

gjanders
SplunkTrust
SplunkTrust

I've used nearly identical settings and it works.

 

If you hit same endpoint using the actual curl CLI tool do you see the same issue?

0 Karma

glouka_tp
Loves-to-Learn Everything

Thank for your reply gjanders.

I don't have any error with the actual curl. The response is in a json format.

Find below the actual curl:

curl -X POST -d @option.txt -k -H "header-api-key:<API KEY>" "https://api.something/v2"

 

option.txt file:

{

"something": "something",

"something": "something",

"something": "something"

}

0 Karma
Get Updates on the Splunk Community!

App Building 101 - Build Your First App!

WATCH RECORDING NOW   Tech Talk: App Dev Edition Splunk has tons of out-of-the-box functionality, and you’ve ...

Introducing support for Amazon Data Firehose in Splunk Edge Processor

We’re excited to announce a powerful update to Splunk Data Management with added support for Amazon Data ...

The Observability Round-Up: September 2024

What’s up Splunk Community! Welcome to the latest edition of the Observability Round-Up, a monthly series in ...