Splunk Apps » Network Tools

This works for some reason: http://10.0.1.14:8000/en-US/splunkd/__raw/services/data/inputs/web_input/?count=-1&output_mode=json&_=1493793762642

But this doesn't: http://10.0.1.14:8000/en-US/splunkd/__raw/services/data/inputs/web_input/adsl_stats?count=-1&output_mode=json&_=1493793762642

Creating a new input worked. I also made one in the launcher app and it worked.

• Inputs endpoint is not accessible from SplunkWeb
• _new doesn't load either
• Endpoint is loadable from splunkd
• Listing endpoint with full namespace works
  • https://splunk.lukemurphey.net/en-US/splunkd/__raw/servicesNS/nobody/website_input/data/inputs/web_input/?count=-1&output_mode=json&_=1493833401770
  • https://splunk.lukemurphey.net/en-US/splunkd/__raw/services/data/inputs/web_input/?count=-1&output_mode=json&_=1493833401770

• Is something to do with web.conf?
• Do other apps with web.conf work?
• Why does the listing work?
• Does this work on Linux?
  • Not on a production, upgraded host
  • Did work on a fresh install of 6.6
  • Attempting upgrade from 6.5.3 (install 6.5.3, install app, make input, upgrade Splunk install)
  • Still worked
• Can this be reproduced in another Windows install?
• Does this only exist when a build is upgraded?
• Does reinstalling the app fix it?
  • Trying: https://build.lukemurphey.net/go/tab/build/detail/web-input-rome/14/installStage/1/install
  • Nope
• Are there any related log messages?
  • Not that I can find
• Try loosening web.conf
  • http://docs.splunk.com/Documentation/Splunk/6.6.0/Admin/Webconf#web.conf.spec
  • Tried: works!
• Is this due to a combination of apps?
• Is there a way to get a list of all of the exposed endpoints?
• Can disable/enable inputs?
  • Returns 200, but doesn't seem to do anything

This works:

[expose:web_input]
methods = GET,POST,DELETE
pattern = data/inputs/web_input/**

This is weird, if I copy the web.conf to local, then it works.