Not getting expected result for API call - platform/2/event/events?begin=
Hi,
We are building a splunk plugin for Isilon and fetching data through Platform APIs.
On Isilon version 7.x, we are calling events API call for the given epoch time to get the events begin with that time
Eg:
/platform/2/event/events?begin=1468488325
where the epoch time 1468488325=14/07/2016 14:55:25 and the call should give the events begin with this time but in output we are getting some events which are of earlier time.
I need to check which document we were referring for Platform APIs.
But generally, I prefer to first execute command https:// :8080/ ? describe which gives all the required information for that call.
For Isilon events I executed this call and below is the piece of output for it and It is clearly described how begin parameter should work, but unfortunately when I provide epoch times with begin, though it gives less number of events in output but still results are not correct.
So on the surface this looks like a bug to me, but I'll have to consult with some of our API SMEs. I did check OneFS 8.0, and I could not reproduce the problem.
> A long shot, but doesn't an event have a time interval [start, end] ?
Yes, events have defined intervals.
> So when the event interval overlaps with the query interval, shouldn't the event be included?
Well, I don't know about "should" , but it could based on the design of the feature. My research didn't clearly indicate that this is the case. I've asked around internally and if I find out anything I'll post it here. Frankly I can see the logic behind including events that are or were active during the search interval. My first thought, though, when reading about "begin" was that only events that *started* after that time would be included in results.
Whatever the behavior, it's clear that the documentation needs some updating.
RobChang-Isilon
136 Posts
1173
0
Posted July 14th, 2016 10:00
Hi Pankaj,
What API reference document are you using? Is it the v7.2.1 doc named docu60111.pdf?
I'm trying to locate the right doc to look for this specific API call. Some of the URIs change between different versions of OneFS.
Thanks.