When the input add-on calls the below API URL, it gets a 402 error. (About 100,000 at a time, in our case.) What is the missing licensing requirement? And how would you turn this off, if you weren't licensed for it?
https://<host>:4285/c42api/v3/SecurityEventsLocation?userUid=<some-uid>;
If you are not licensed for Security Events (to determine your licensing levels, please contact Code42 Sales), or to remove the errors, you need to uncheck the Security
box from the Modular Input configuration. Those calls are only made during collection of security events.
Thank you. That solved the problem.