All Apps and Add-ons

Connection to Azure eventhub

dkfrodo
Observer

Hi,

I am using the latest version of splunk addon for microsoft cloud services 4.1.2, and splunk 8.1.3.
I have followed the guides for setting up azure event hub, application and eventhub in the addon.
but I do not get any data in what so ever.

Unlike previous versions the eventhub does not include the sas string but only
Namespace (fqdn)
Eventhubname
Consumer Group
Max Wait Time
Max Batch Size
Index
Source Type
Interval.

In the log file I keep getting this error
2021-04-22 18:21:16,315 level=WARNING pid=22752 tid=Thread-1 logger=uamqp.receiver pos=receiver.py:get_state:270 | LinkDetach("ErrorCodes.UnauthorizedAccess: Unauthorized access. 'Listen' claim(s) are required to perform this operation. Resource: 'sb://*********-monitor.servicebus.windows.net/*********/consumergroups/$default/partitions/0'. TrackingId:**************************

Any ideas as to where I should look?

Labels (1)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...