All Apps and Add-ons

Microsoft Azure Add on - ERROR403 Client Error: Forbidden

Explorer

Hi all,

we configured the Input Microsoft Azure Active Directory Sign-ins in Microsoft Azure Add on and get always following error message.

10-27-2020 11:05:23.938 +0100 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-MS-AAD/bin/MS_AAD_signins.py" ERROR403 Client Error: Forbidden for url: https://graph.microsoft.com/beta/auditLogs/signIns*

We configured it as described in the App itself app/TA-MS-AAD/aad_app_registration.

Can someone explain what is still missing to get the data in?

kind regards

Kathrin

Labels (1)
0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!