Hi,
Has anyone successfully created tenants via .conf files from the command-line? I've created them and restarted splunk, but data pull fails. The log files say that the splunk_ta_o365_secret could not be found. When I look at the local directory for the app, no passwords.conf exists. I then go into the gui, re-enter the client secret, and the passwords.conf file gets created, and the data pull works. So, it looks the tenant client_secrets must be added via the gui?
Hope this makes sense.
Have you tried writing the conf file (passwords.conf in /local) via command line and restarting Splunk? I'd suspect when Splunk reloads it'll reload the conf file and populate the app.