TA_Guardium API Add-on for Splunk

[0xAli]

Hi All,
I hope all is well.

Kindly, anyone works with Guardium API Add-on for Splunk:

https://splunkbase.splunk.com/app/8290

I have two questions:

1. The auth-token will be expire just in 3 hours, is this addon will refresh it

I used this command to generate the token:

grdapi register_oauth_client client_id=splunk_client2 grant_types="password" user="admin" password="<PASSWORD>" GetToken=1

Output:

{"client_id":"splunk_client2","client_secret":"440cef5c-42a8-4fd5-9741-17266cxxxxx","grant_types":"password","scope":"read,write","redirect_uri":"https://someApp"}
{"access_token":"token","token_type":"bearer","expires_in":10799,"scope":"read write"}

2. This command doesn't work properly as expected?

url -k -X POST https://<guardium_host>:8443/restAPI/online_report \
  -H "Authorization: Bearer <token>" \
  -H "Content-Type: application/json" \
  -d '{"reportName":"SQL Activity","indexFrom":"1","fetchSize":30000}'