All Apps and Add-ons

How to get the Splunk App and Add-on for Okta to stop pulling duplicate data?

butzowj
Path Finder

Hello -

I am working on getting the Splunk App and Add-on for Okta working for Splunk 6.2.4. Currently I am pulling in some data with the okta:user sourcetype, but I just keep pulling back the same records...

What can I do to get the app to stop pulling in duplicate records?

Thanks!

0 Karma
1 Solution

rwang_splunk
Splunk Employee
Splunk Employee

Hi butzowj

The sourcetype okta:user is designed to retrieve all user data from Okta system on a certain interval time. It will pull the same data from the Okta system if the user information does not change. I think you can either disable the inputs after pulling the data, and enable it whenever you want to, or set a longer interval time to prevent frequent data duplication.

View solution in original post

rwang_splunk
Splunk Employee
Splunk Employee

Hi butzowj

The sourcetype okta:user is designed to retrieve all user data from Okta system on a certain interval time. It will pull the same data from the Okta system if the user information does not change. I think you can either disable the inputs after pulling the data, and enable it whenever you want to, or set a longer interval time to prevent frequent data duplication.

Get Updates on the Splunk Community!

Splunk Education - Fast Start Program!

Welcome to Splunk Education! Splunk training programs are designed to enable you to get started quickly and ...

Five Subtly Different Ways of Adding Manual Instrumentation in Java

You can find the code of this example on GitHub here. Please feel free to star the repository to keep in ...

New Splunk APM Enhancements Help Troubleshoot Your MySQL and NoSQL Databases Faster

Splunk Observability has two new enhancements to make it quicker and easier to troubleshoot slow or frequently ...