Monitoring Splunk

Splunk modular input: calls to splunk API never get a response ONLY when triggered from the UI,Splunk modular input API calls to splunkd are timing out ONLY after being triggered from UI?

gurtajkhatraexp
New Member

Hi, I've been working on a splunk add on and inside the validate_input section, I make an API call to splunkd to get an unencrypted version of the input to validate it. However all my api calls from the add on script to the splunk API (ie calling localhost:8089/servicesNS/nobody/my-addon/my-addon) to get this data never receive a response and eventually timeout BUT ONLY when the validate_input section is called from the UI (for example after an input data change). If I hit the endpoint in postman with the same headers/paramters it goes through fine. External calls to websites like google.com work fine, and return responses when triggered from the UI.

Does anyone have any idea as to why call originating from the UI would always cause these timeouts ONLY when calling splunkd? Any tips on how I could go about debugging this issue?

Labels (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...