https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-Add-on-for-Microsoft-Security-and-Microsoft-URLs/m-p/668080#M79944 <P>I just want to pose a quick question about the Microsoft API URLs that are used in the add-on.&nbsp; At what point will the add-on be updated to reflect the new URL changes?&nbsp; I had a conversation with a Microsoft engineer, and he mentioned that the following URLs may not work past Dec 31 2024:&nbsp; &nbsp;</P> <LI-CODE lang="markup">API_ADVANCED_HUNTING = "/api/advancedhunting/run" API_ALERTS = "/api/alerts" API_INCIDENTS = "/api/incidents</LI-CODE> <P>This link shows the difference between some of the old vs new urls :&nbsp;&nbsp;<A href="https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview?view=graph-rest-1.0#alerts-and-incidents-preview" target="_blank" rel="noopener">Use the Microsoft Graph security API - Microsoft Graph v1.0 | Microsoft Learn</A></P> <P>I know it's a while off.&nbsp; However, it comes quick at times.&nbsp; Just trying to understand the process so I can stay ahead of it.&nbsp; Also, I have seen add-ons that have the option for legacy inputs and also for current.&nbsp; It would be great to have an option like that before the URL switch for this add-on.</P> Thu, 09 Nov 2023 15:12:55 GMT foresterd 2023-11-09T15:12:55Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-Add-on-for-Microsoft-Security-and-Microsoft-URLs/m-p/668080#M79944 <P>I just want to pose a quick question about the Microsoft API URLs that are used in the add-on.&nbsp; At what point will the add-on be updated to reflect the new URL changes?&nbsp; I had a conversation with a Microsoft engineer, and he mentioned that the following URLs may not work past Dec 31 2024:&nbsp; &nbsp;</P> <LI-CODE lang="markup">API_ADVANCED_HUNTING = "/api/advancedhunting/run" API_ALERTS = "/api/alerts" API_INCIDENTS = "/api/incidents</LI-CODE> <P>This link shows the difference between some of the old vs new urls :&nbsp;&nbsp;<A href="https://learn.microsoft.com/en-us/graph/api/resources/security-api-overview?view=graph-rest-1.0#alerts-and-incidents-preview" target="_blank" rel="noopener">Use the Microsoft Graph security API - Microsoft Graph v1.0 | Microsoft Learn</A></P> <P>I know it's a while off.&nbsp; However, it comes quick at times.&nbsp; Just trying to understand the process so I can stay ahead of it.&nbsp; Also, I have seen add-ons that have the option for legacy inputs and also for current.&nbsp; It would be great to have an option like that before the URL switch for this add-on.</P> Thu, 09 Nov 2023 15:12:55 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-Add-on-for-Microsoft-Security-and-Microsoft-URLs/m-p/668080#M79944 foresterd 2023-11-09T15:12:55Z