Getting Data In

REST API Modular Input - Polling Interval is not working

jeromemarcotty
Engager

Hello Everyone,

I try to use the REST Api Input in my splunk account but i have an issue.
The "Polling Interval" value configuration seems not to work and the default value is not working either.

In fact the REST service i try to contact is flooded like hell with many request by seconds !
I try without any value, with a value in second, millisecond, nothing is working and my service keep to be flooded.

Can you help me with this ?

0 Karma

ryanoconnor
Builder

Unfortunately I can't get server-side error logs. I am trying to connect to the Nest API and don't have access to the server. I can successfully connect, but intervals do not seem to work at all. The only error I get is from rest.py:

11-01-2015 21:26:15.237 -0500 ERROR ExecProcessor - message from "python /Applications/Splunk/etc/apps/rest_ta/bin/rest.py" Exception performing request:

I get this each time the client should be reaching out to pull down data.

If I restart Splunk or edit and save the input, the data comes down once and I enter the same broken state.

0 Karma

Damien_Dallimor
Ultra Champion

what does your inputs.conf stanza look like ?

0 Karma

ryanoconnor
Builder

[rest://Nest Devices]
auth_type = oauth2
endpoint = https://developer-api.nest.com/devices.json
http_method = GET
index_error_response_codes = 1
oauth2_access_token = TOKEN
oauth2_client_id = CLIENT_ID
oauth2_client_secret = CLIENT_SECRET
response_type = json
sequential_mode = 0
sourcetype = nest
streaming_request = 0
url_args = auth=TOKEN
polling_interval =

0 Karma

Damien_Dallimor
Ultra Champion

Do you have any errors in the logs ?

Search in Splunk with :

index=_internal ExecProcessor error rest.py

Do you have any errors on the server hosting the REST endpoint ?

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...