Hi,
My Netskope modular input is downloading very little content although running the REST URL with curl returns thousands of Netskope events.
I need to set this input to DEBUG mode to see what it is doing. Where do I set it in IA-NetSkopeAppForSplunk?
The URL that works below validates that our token is working.
curl -vk "https://<redacted>.goskope.com/api/v1/clients?tenanturl=<redacted>.goskope.com&skip=0&token=<redacted>f&event_type=clients&limit=5000&type=clients&endpoint=clients&starttime=1528151000&endtime=1528151945"
Thanks!
-Shreedeep.
Hi smitra.
To set the IA to DEBUG mode, please change INFO to DEBUG in the following locations.
bin/ModularInput.py line 55
bin/netskope.py line 21
Let us know if there are any further questions.
Thank you,
Aplura, LLC