All Apps and Add-ons

What if there are issues with Splunk MINT REST API?

croyal_splunk
Splunk Employee
Splunk Employee

What if there are issues with MINT REST API ?

What happens if the API REST MINT endpoint is down when a devices is trying to send data? Will the app hang? crash? retry after few seconds without affecting normal app behavior?

What happens if the API REST MINT endpoint answers with HTTP 5XX?

What happens if the API REST MINT takes too much time in their answers?

What are the timeouts defined in the SDK?

Will the API REST MINT crash/block/freeze the app?

0 Karma
1 Solution

croyal_splunk
Splunk Employee
Splunk Employee

What happens if the API REST MINT endpoint is down when a devices is trying to send data? The app will hangs? Crash? Retry after few seconds without affecting normal app behavior?
MINT SDK will write the new data to the disk up to the limit of 420kb (140k x 3 files) and will try to send the data if app restarts, flush() is called or when disk storage limit is reached again.

What happens if the API REST MINT endpoint answers with HTTP 5XX?
In HTTP parlance 5xx considered server side error and MINT SDK will follow the same rules as in the case of MINT backend unavailability.

What happens if the API REST MINT takes too much time in their answers?
MINT SDK network invocation are happening asynchronously with respect to the rest of the app code and shouldn’t block the app. MINT uses 10 sec connection and availability of server response timeout. If the transmission times out it will be considered as server unavailabilty and the logic described in first answer will kick in.

Can in some case the API REST MINT crash/block/freeze the app?
We are making extra effort not to affect the app under any circumstances. SDK are architected and engineered for this. There is small fixed size overhead expected related to the SDK functionality, but it should not affect user experience or app performance in any material way.

View solution in original post

croyal_splunk
Splunk Employee
Splunk Employee

What happens if the API REST MINT endpoint is down when a devices is trying to send data? The app will hangs? Crash? Retry after few seconds without affecting normal app behavior?
MINT SDK will write the new data to the disk up to the limit of 420kb (140k x 3 files) and will try to send the data if app restarts, flush() is called or when disk storage limit is reached again.

What happens if the API REST MINT endpoint answers with HTTP 5XX?
In HTTP parlance 5xx considered server side error and MINT SDK will follow the same rules as in the case of MINT backend unavailability.

What happens if the API REST MINT takes too much time in their answers?
MINT SDK network invocation are happening asynchronously with respect to the rest of the app code and shouldn’t block the app. MINT uses 10 sec connection and availability of server response timeout. If the transmission times out it will be considered as server unavailabilty and the logic described in first answer will kick in.

Can in some case the API REST MINT crash/block/freeze the app?
We are making extra effort not to affect the app under any circumstances. SDK are architected and engineered for this. There is small fixed size overhead expected related to the SDK functionality, but it should not affect user experience or app performance in any material way.

croyal_splunk
Splunk Employee
Splunk Employee
0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...