All Apps and Add-ons

Box data errors

montydo
Explorer

I have configured the box add-on correctly, however I am receiving the following error on the web portal under "Messages"

Search peer splunk-par-peer.geant.net has the following message: Received event for unconfigured/disabled/deleted index=boxdata with source="source::https://api.box.com::BoxInputEvents" host="host::splunk-fra-sh.geant.net" sourcetype="sourcetype::box:events". So far received events from 2 missing index(es).
0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

@montydo

Can you please check boxdata index??

In Splunk Web, navigate to Settings > Indexes

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

Is it available OR disabled?

0 Karma

montydo
Explorer

I don't have a boxdata index,

I have configured the add-on to send all data to a different index, but am still getting errors for the old index.

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

Can you please check any index name mentioned in inputs.conf??

Anything like
index = boxdata

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...