All Apps and Add-ons

Configuring Splunk TA for microsoft teams

orca
Explorer

While following this https://www.splunk.com/en_us/blog/tips-and-tricks/splunking-microsoft-teams-data.html ,setup the webhook url and when trying to fetch subscription/call record data, I am getting this error in logs:

2021-01-15 15:03:15,233 INFO pid=20819 tid=MainThread file=setup_util.py:log_info:117 | Proxy is not enabled!
2021-01-15 15:03:15,584 ERROR pid=20819 tid=MainThread file=base_modinput.py:log_error:309 | Could not create subscription: 400 Client Error: Bad Request for url: https://graph.microsoft.com/beta/subscriptions

In TA setup, proxy configuration needs host,port,username password. what this should be?

Also where i can find the webhook URL to test the input created with teams webhook input using curl command as mentioned in the blog post.

@jconger 

Thanks,

Labels (1)
0 Karma

paulbannister
Communicator

I find myself in the exact same situation at the moment with our setup, we're doing ours for Splunk Cloud via an IDM.

I don't suppose you managed to find a resolution to this? 

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!