Using the auth0 add on not seeing any data

rkeller_splunk — Wed, 08 May 2024 14:56:12 GMT

Set up the add on on a cloud instance. Not seeing any data come in via HEC. Any ideas on how to troubleshoot?

Thanks

Re: Using the auth0 add on not seeing any data

deepakc — Thu, 09 May 2024 09:32:23 GMT

Start by checking the logs

These can also be set via the GUI

$SPLUNK_HOME/bin/splunk set log-level HTTPServer -level DEBUG $SPLUNK_HOME/bin/splunk set log-level HttpInputDataHandler -level DEBUG $SPLUNK_HOME/bin/splunk set log-level TcpInputProc -level DEBUG

Remember to set back to WARN once you have finished debugging

Then search - this may give you some clues for you to further investigate

index=_internal source=*splunkd.log* (component=HttpInputDataHandler OR component=TcpInputProc OR component=HTTPServer)

topic Re: Using the auth0 add on not seeing any data in Getting Data In

Using the auth0 add on not seeing any data

Re: Using the auth0 add on not seeing any data