# Webhook integration with Splunk - ERROR HttpInputDataHandler

**URL:** <https://devforum.zoom.us/t/webhook-integration-with-splunk-error-httpinputdatahandler/35980>\
**Category:** API and Webhooks\
**Created:** [November 13, 2020, 4:12pm UTC](https://devforum.zoom.us/t/webhook-integration-with-splunk-error-httpinputdatahandler/35980 "2020-11-13T16:12:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mlcooper](https://avatars.discourse-cdn.com/v4/letter/m/94ad74/32.png) [@mlcooper](https://devforum.zoom.us/u/mlcooper)\
**Post date:** [November 13, 2020, 4:12pm UTC](https://devforum.zoom.us/t/webhook-integration-with-splunk-error-httpinputdatahandler/35980/1 "2020-11-13T16:12:05Z")

</div>

**Description**  
We have integrated our Zoom account with Splunk via the webhook on the Zoom side. Zoom then sends us data via our externally facing Load Balancer and it is then ingested into splunk.

**Error**  
In /opt/splunk/var/log/splunk/splunkd.log we are seeing this error with some frequency, however I’m not sure what it is. A parsing error?

ERROR HttpInputDataHandler - Failed processing http input, token name=zoom, channel=n/a, source\_IP=(LoadBalancer IP), reply=9, events\_processed=0, http\_input\_body\_size=230

**Which App Type (OAuth / Chatbot / JWT / Webhook)?**  
Webhook

---

<div class="post-metadata">

**Author:** ![will.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/will.zoom/32/14417_2.png) [@will.zoom](https://devforum.zoom.us/u/will.zoom)\
**Post date:** [November 16, 2020, 9:00pm UTC](https://devforum.zoom.us/t/webhook-integration-with-splunk-error-httpinputdatahandler/35980/2 "2020-11-16T21:00:07Z")

</div>

Hey @mlcooper,

Thanks for reaching out about this. To clarify, is this a Zoom error or a Splunk-related error?

It almost seems like this is in reference to Splunk having ingestion issues, but let me know if I’m misunderstanding. Can you confirm splunk is expecting JSON payloads from Zoom?

Thanks,  
Will

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\
**Post date:** [December 17, 2020, 7:00am UTC](https://devforum.zoom.us/t/webhook-integration-with-splunk-error-httpinputdatahandler/35980/3 "2020-12-17T07:00:18Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.