Hello,
I am using Splunk Enterprise. From MS site I registred app with premission to Security Alert and Security Incidents, also added account in Splunk. Imposible to add input there is error below:
Hello @bulbulator For sure you have to check internal logs, there can be multiple reason behind this issue.
That's not much for anyone to work with. Have you checked splunkd.log? What did you find there?