Getting Data In

Data Inputs REST / HTTP Header Properties: How can I specify a value with an "aring" (å) character in it?

torustad
Path Finder

Hi all,

So I am trying to specify a rest data input and I think there is a problem specifying a Header property which has a value with an "aring" (å) in it. I edited it into inputs.conf, but it was converted to an "a" when I saved the configuration back from Splunk Web.

I had same problem with curl as well; I got it to work by adding the property to a file which was read by means of the -K switch.
And it had to be an ANSI encoded file.

I have the following configuration which should be ok I think:

[rest://aName]
auth_password = 
auth_type = none
auth_user = 
backoff_time = 30
endpoint = https://aServer.a.dom.ain:8443/aProgram/system?_action=test
host = idm
http_method = POST
index = idm
index_error_response_codes = 1
polling_interval = 22
response_type = json
sequential_mode = 0
sourcetype = json_no_timestamp
streaming_request = 0
http_header_propertys = X-Username=aUserName,X-Password=N_XyZåAbC
disabled = 0

Does anybody know a way to input this password (seemingly ANSI-encoded) with the awkward å (aring)?

Unfortunately, changing the password is not an option.

Thanks and regards,
Bård Tørustad

0 Karma

DalJeanis
Legend

Did you find a solution, Bard?

0 Karma

jkat54
SplunkTrust
SplunkTrust

Yeah what he said... Try \xc3a5 or 0xc3a5 in place of the aring. If that doesn't work, try this urlencoding of it %C3%A5

0 Karma

DalJeanis
Legend

There is a UTF8 encoding for aring (0x'c3a5') , which is different from the UTF16 encoding (0x'00E5')

Have you tried turning the whole thing into a hex UTF8 character string? That would look something like this

UTF8   0x004E005F00580079005AC3A5004100620043
UTF16  0x004E005F00580079005A00E5004100620043
0 Karma

DalJeanis
Legend

I just posted a drilldown question to make sure the code sample has been vetted for format -

Posted here - https://answers.splunk.com/answers/489964/what-is-the-format-for-putting-information-into-co.html?mi...

0 Karma
Get Updates on the Splunk Community!

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...

IM Landing Page Filter - Now Available

We’ve added the capability for you to filter across the summary details on the main Infrastructure Monitoring ...

Dynamic Links from Alerts to IM Navigators - New in Observability Cloud

Splunk continues to improve the troubleshooting experience in Observability Cloud with this latest enhancement ...