Getting Data In

REST API Modular Input add on stopped reading data

soumyasaha25
Contributor

i am using REST API Modular Input add on to ingest data from PRTG in JSON format which was working fine until yesterday when i tried to add some more configs to better process the data (props.conf and inputs.conf - a minor change in the endpoint). but strangely the data ingest stopped after the change, the endpoint query works fine since its working in the browser, checked splunkd logs as well there is nothing much that i can see from the time the data stopped coming in, did anyone face similar issues earlier?

this is my inputs.conf
[rest://PRTG_<IP>]
activation_key = <key>
auth_password = <username>
auth_type = basic
auth_user = <password>
endpoint = https://<IP>/api/table.json?content=sensors&output=json&columns=objid,probe,group,device,host,sensor,status,message,lastvalue,priority&count=100&username=<user>&passhash=<pass>
host = <ip>
http_method = GET
index = prtg
index_error_response_codes = 0
log_level = INFO
response_type = json
sequential_mode = 0
sourcetype = mysourcetype
streaming_request = 0
disabled = 0
this is the props.conf
[mysourcetype]
KV_MODE = JSON
Labels (2)
0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...