Splunk Dev

[EXCEPTION] HTTP 200 OK

sharathemerian
New Member

I have setup splunk sdk and I am trying to run splunk searches.
For any search including the saved searches I get this result ==> [EXCEPTION] HTTP 200 OK.

I am using splunk for the first time, any help would be appreciated.

Thanks
Sharath Kumar

Tags (3)
0 Karma

twhitehead
New Member

Not a direct answer to the bug, but an alternative to making the exec_mode=blocking.

I hadn't experienced the issue in the last 7 years using exec_mode=normal, recently I've begun migrating to PHP 7.1 which is when I first noticed the bug and it occurred every request. During debugging sessions, the bug would only occur some of the times, I noticed when I was digging into the create method, the request would succeed.

I placed a one second sleep after the create and before my isDone loop and the request succeeds. I haven't looked into the cause of the bug itself, but I suspect at least for myself when running under PHP 5.3.8 the processing is that much slower than PHP 7 that it was enough of a delay to not trigger the bug. I would wager that the job in splunk hasn't been fully created by the time the script was looking for a status.

0 Karma

vijayaragavans
New Member

Hi,

Yes. i also got the same issue with splunk sdk api. able to resolve it with exec_mode as blocking in creating a job element.

More understanding : http://www.drtuts.com/http-200-ok-response-in-splunk-api-php/

thanks,
vijay,Hi Sharath,

Yes. I also faced same issues with splunk sdk api.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

    Thursday, June 25, 2026  |  11AM PDT / 2PM EDT  Duration: 1 Hour (Includes live Q&A) Register to ...

Analytics Workspace deprecation

As of Splunk Cloud Platform 10.4.2604 and Splunk Enterprise 10.4, Analytics Workspace is now deprecated. ...

Splunk Developer Day Recap: Building, Publishing, and Growing on the Splunk Platform

Splunk Developer Day brought the Splunk developer community together for a practical look at what it means to ...