Getting Data In

REST API Modular Input - Polling Interval is not working

jeromemarcotty
Engager

Hello Everyone,

I try to use the REST Api Input in my splunk account but i have an issue.
The "Polling Interval" value configuration seems not to work and the default value is not working either.

In fact the REST service i try to contact is flooded like hell with many request by seconds !
I try without any value, with a value in second, millisecond, nothing is working and my service keep to be flooded.

Can you help me with this ?

0 Karma

ryanoconnor
Builder

Unfortunately I can't get server-side error logs. I am trying to connect to the Nest API and don't have access to the server. I can successfully connect, but intervals do not seem to work at all. The only error I get is from rest.py:

11-01-2015 21:26:15.237 -0500 ERROR ExecProcessor - message from "python /Applications/Splunk/etc/apps/rest_ta/bin/rest.py" Exception performing request:

I get this each time the client should be reaching out to pull down data.

If I restart Splunk or edit and save the input, the data comes down once and I enter the same broken state.

0 Karma

Damien_Dallimor
Ultra Champion

what does your inputs.conf stanza look like ?

0 Karma

ryanoconnor
Builder

[rest://Nest Devices]
auth_type = oauth2
endpoint = https://developer-api.nest.com/devices.json
http_method = GET
index_error_response_codes = 1
oauth2_access_token = TOKEN
oauth2_client_id = CLIENT_ID
oauth2_client_secret = CLIENT_SECRET
response_type = json
sequential_mode = 0
sourcetype = nest
streaming_request = 0
url_args = auth=TOKEN
polling_interval =

0 Karma

Damien_Dallimor
Ultra Champion

Do you have any errors in the logs ?

Search in Splunk with :

index=_internal ExecProcessor error rest.py

Do you have any errors on the server hosting the REST endpoint ?

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...