https://community.splunk.com/t5/All-Apps-and-Add-ons/Microsoft-Cloud-Add-On-Checkpoint-Splunk-Microsoft-Cloud-Add-On/m-p/325958#M39005 <P>I found the checkpoints, they are stored in /apps/splunk/var/lib/splunk/modinputs/ms_o365_management </P> Tue, 29 Sep 2020 18:30:19 GMT jp_elizabeth 2020-09-29T18:30:19Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Microsoft-Cloud-Add-On-Checkpoint-Splunk-Microsoft-Cloud-Add-On/m-p/325957#M39004 <P>Does anyone know where the Microsoft Cloud Add-On stores the checkpoint for retrieving data? I'm assuming there's one in place otherwise there would be duplicate data each time the API is polled by the Add-On.</P> <P>Alternatively is there a way of telling the Add-on how far back to pull data from?,Does anyone know where the Add-on stores the checkpoint for retrieving data? I'm assuming there's one in place otherwise you'd be pulling duplicate data every time the add-on polls the API.</P> Thu, 01 Mar 2018 14:04:49 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Microsoft-Cloud-Add-On-Checkpoint-Splunk-Microsoft-Cloud-Add-On/m-p/325957#M39004 jp_elizabeth 2018-03-01T14:04:49Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Microsoft-Cloud-Add-On-Checkpoint-Splunk-Microsoft-Cloud-Add-On/m-p/325958#M39005 <P>I found the checkpoints, they are stored in /apps/splunk/var/lib/splunk/modinputs/ms_o365_management </P> Tue, 29 Sep 2020 18:30:19 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Microsoft-Cloud-Add-On-Checkpoint-Splunk-Microsoft-Cloud-Add-On/m-p/325958#M39005 jp_elizabeth 2020-09-29T18:30:19Z