It works to run the | curl method=get to my URL, but when setting it up as a modular input I get errors in the  ta_webtools_curl_inputs.log. I am running version 2.0.2 of the tool on Splunk Enterprise 8.0.4. The error: 2021-01-20 12:08:50,106 ERROR pid=125277 tid=MainThread file=base_modinput.py:log_error:309 | Get error when collecting events. Traceback (most recent call last): File "/opt/splunk/etc/apps/TA-webtools/bin/ta_webtools/aob_py3/modinput_wrapper/base_modinput.py", line 128, in stream_events self.collect_events(ew) File "/opt/splunk/etc/apps/TA-webtools/bin/curl_inputs.py", line 84, in collect_events input_module.collect_events(self, ew) File "/opt/splunk/etc/apps/TA-webtools/bin/input_module_curl_inputs.py", line 43, in collect_events if len(payload)>0: TypeError: object of type 'NoneType' has no len() Any pointers to what may cause this error? Perhaps  @jkat54 ? ... View more

We have users with somewhat limited capabilities using custom search home apps. They are able to search the data they should, but gets an error when trying to use python based search commands, specifically xmlkv. The search looks like: index=win* host=vm-ktapp-2 LogName=Application | xmlkv As admin I am able to run the search, but the users get the error: Unknown search command 'xmlkv'. We are on 6.3.3 currently. I am suspecting some capability is needed to allow using the Python base search commands, but I have trouble guessing which. Anyone have an idea? The users have these capabilites now: accelerate_search change_own_password get_metadata get_typeahead input_file list_inputs output_file pattern_detect request_remote_tok rest_apps_view rest_properties_get rest_properties_set schedule_rtsearch search ... View more