<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Error proofpoint TAP : When trying to retrieve the last poll time, multiple kvstore records were found in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Error-proofpoint-TAP-When-trying-to-retrieve-the-last-poll-time/m-p/680546#M113697</link>
    <description>&lt;P&gt;We have installed "&lt;SPAN&gt;Proofpoint TAP Modular Input" add-on on victoria search head and created input (api call) to fetch the logs. For the first run, it fetched one event and from next runs it is throwing an error: " &lt;SPAN class=""&gt;pp_tap_input:&lt;/SPAN&gt; &lt;SPAN class=""&gt;When&lt;/SPAN&gt; &lt;SPAN class=""&gt;trying&lt;/SPAN&gt; &lt;SPAN class=""&gt;to&lt;/SPAN&gt; &lt;SPAN class=""&gt;retrieve&lt;/SPAN&gt; &lt;SPAN class=""&gt;the&lt;/SPAN&gt; &lt;SPAN class=""&gt;last&lt;/SPAN&gt; &lt;SPAN class=""&gt;poll&lt;/SPAN&gt; &lt;SPAN class=""&gt;time&lt;/SPAN&gt;, &lt;SPAN class=""&gt;multiple&lt;/SPAN&gt; &lt;SPAN class=""&gt;kvstore&lt;/SPAN&gt; &lt;SPAN class=""&gt;records&lt;/SPAN&gt; &lt;SPAN class=""&gt;were&lt;/SPAN&gt; &lt;SPAN class=""&gt;found". We tried creating new input and observed the same behavior.&amp;nbsp;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;</description>
    <pubDate>Wed, 13 Mar 2024 13:42:34 GMT</pubDate>
    <dc:creator>as_lyric</dc:creator>
    <dc:date>2024-03-13T13:42:34Z</dc:date>
    <item>
      <title>Error proofpoint TAP : When trying to retrieve the last poll time, multiple kvstore records were found</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Error-proofpoint-TAP-When-trying-to-retrieve-the-last-poll-time/m-p/680546#M113697</link>
      <description>&lt;P&gt;We have installed "&lt;SPAN&gt;Proofpoint TAP Modular Input" add-on on victoria search head and created input (api call) to fetch the logs. For the first run, it fetched one event and from next runs it is throwing an error: " &lt;SPAN class=""&gt;pp_tap_input:&lt;/SPAN&gt; &lt;SPAN class=""&gt;When&lt;/SPAN&gt; &lt;SPAN class=""&gt;trying&lt;/SPAN&gt; &lt;SPAN class=""&gt;to&lt;/SPAN&gt; &lt;SPAN class=""&gt;retrieve&lt;/SPAN&gt; &lt;SPAN class=""&gt;the&lt;/SPAN&gt; &lt;SPAN class=""&gt;last&lt;/SPAN&gt; &lt;SPAN class=""&gt;poll&lt;/SPAN&gt; &lt;SPAN class=""&gt;time&lt;/SPAN&gt;, &lt;SPAN class=""&gt;multiple&lt;/SPAN&gt; &lt;SPAN class=""&gt;kvstore&lt;/SPAN&gt; &lt;SPAN class=""&gt;records&lt;/SPAN&gt; &lt;SPAN class=""&gt;were&lt;/SPAN&gt; &lt;SPAN class=""&gt;found". We tried creating new input and observed the same behavior.&amp;nbsp;&lt;/SPAN&gt;&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 13 Mar 2024 13:42:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Error-proofpoint-TAP-When-trying-to-retrieve-the-last-poll-time/m-p/680546#M113697</guid>
      <dc:creator>as_lyric</dc:creator>
      <dc:date>2024-03-13T13:42:34Z</dc:date>
    </item>
  </channel>
</rss>

