Hi
I am using a 3rd party app to PUT into a table via REST. While I see a row created on the table, I cant see the fields I was expecting to be filled in. How can I see a trace of the incoming payload?
Thanks.
Hi
I am using a 3rd party app to PUT into a table via REST. While I see a row created on the table, I cant see the fields I was expecting to be filled in. How can I see a trace of the incoming payload?
Thanks.
Here is the background. I have a table called “Alerts” in my app (B78A830E-7A03-838E-FF36-46CF57DEF200).
I am sending a PUT request from Splunk. Was expecting the table columns to be updated based on the field names in the “results”. But the columns are empty, although I see the row updated with the correct timestamp.
I used webhook.site to test the transaction. It received the following header and raw data. Could you please figure out why it is not updating?
Headers
connection close
user-agent Splunk/741441E5-1159-4A4D-98B7-0964BB6C2BD8
content-type application/json
host webhook.site
content-length 417
accept-encoding identity
Raw Content
{
“sid”: “rt_scheduler__admin__search__RedAlert_at_1611936221_192.1”,
“search_name”: “RedAlert”,
“app”: “search”,
“owner”: “admin”,
“results_link”: “http://imac.lan:8000/app/search/search?q=|loadjob%20rt_scheduler__admin__search__RedAlert_at_1611936221_192.1%20|%20head%201%20|%20tail%201&earliest=0&latest=now”,
“result”: {
“event_name”: “red”,
“corpId”: “7479”,
“siteId”: “15SPRD2”,
“userId”: “94F618F3DB1512”
}
}
Hi. I figured out the problem. It was coming in as a POST transaction. It is resolved now.