Getting Data In

REST API Modular Input v1.9.8 - No Data Received

ramanan
Engager

Hi All,

 
I am trying to use "REST API Modular Input v1.9.8" app to receive REST API calls from Dynatrace. But i am not getting any data. When i checked the splunkd.log, i could see the below error. Please help me to fix this issue.
 
========================================
01-20-2021 08:30:34.943 -0800 WARN  LocalAppsAdminHandler - Using deprecated capabilities for write: admin_all_objects or edit_local_apps. See enable_install_apps in limits.conf
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py"" Exception in thread Thread-1:
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py"" Traceback (most recent call last):
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py""   File "D:\Program Files\Splunk\Python-3.7\lib\threading.py", line 926, in _bootstrap_inner
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py""     self.run()
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py""   File "D:\Program Files\Splunk\Python-3.7\lib\threading.py", line 870, in run
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py""     self._target(*self._args, **self._kwargs)
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py""   File "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py", line 489, in do_run
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py""     (item.split('=',1) for item in http_header_propertys_str.split(delimiter)))
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py""   File "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py", line 488, in <genexpr>
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py""     http_header_propertys = dict((k.strip(), v.strip()) for k,v in
01-20-2021 08:30:37.628 -0800 ERROR ExecProcessor - message from ""D:\Program Files\Splunk\bin\Python3.exe" "D:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py"" ValueError: not enough values to unpack (expected 2, got 1)
===============================================
 
Data Input Details are below:
Endpoint URL - https://abcd.dynatrace-managed.com/e/xxxxxxxxxxxxxxxxx/api/v1
Activation Key - xxxxxxxxxxxxxxxxxxxxxxxxx
HTTP Method - GET
Authentication Type - none
HTTP Header Propertys - Authorization: Api-Token xxxxxxxxxxxxxxxxx
Response Type - json
Streaming Request - 0
Sequential Mode - 0
Index Error Responses - 0
Log Level - INFO
Interval - 60
Set Source Type - Manual
Source Type - DynatraceOAV
Host - $decideOnStartup
Index - main
0 Karma
1 Solution

ramanan
Engager

Issue fixed. Thanks to BaboonBones suport team. Replaced ":" with "=" after the Authorization in the HTTP Header Propertys

HTTP Header Propertys - Authorization=Api-Token xxxxxxxxxxxxxxxxx

 

 

View solution in original post

ramanan
Engager

Issue fixed. Thanks to BaboonBones suport team. Replaced ":" with "=" after the Authorization in the HTTP Header Propertys

HTTP Header Propertys - Authorization=Api-Token xxxxxxxxxxxxxxxxx

 

 

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...