search

LukeMurphey / splunk-syndication-input

A Splunk app for reading syndication feeds (RSS, ATOM, RDF)
GNU General Public License v3.0
7 stars 8 forks source link

syndication.py randomly stops processing feeds #1

Open xme opened 7 years ago

xme commented 7 years ago

I installed splunk-syndication-input to handle a lot of RSS feeds for OSINT purpose. At random interval the Python script stops processing feeds. How to restart it manually? I'm trying to identify which RSS feeds puts it in a stuck state... Did you already see such behavior? Any idea?

/x

LukeMurphey commented 7 years ago

You can restart the input by disabling and re-enabling it. You also might want to try to figure out why the input failed by running the searches here: http://lukemurphey.net/projects/splunk-syndication-input/wiki/Troubleshooting

I'm looking into a better method to make the inputs re-start.

LukeMurphey commented 7 years ago

Are you still experiencing issues with the inputs failing at times?

I ask because never versions of Splunk seem to try harder to restart the inputs. Furthermore, I haven't been able to reproduce the issue and thus am having a hard time figuring out why the input is stopping.