While configuring the AAD User log, I am getting this error. Is there anyone who can help me regrading this?
----------------------------------------------------------------------------------------
2020-12-22 08:42:59,793 ERROR pid=13688 tid=MainThread file=base_modinput.py:log_error:309 | Get error when collecting events.
Traceback (most recent call last):
A 403 error is typically a permissions issue with the Azure AD app registration. Check the permissions by going to https://portal.azure.com Go to Azure Active Directory > App registrations > find your app registration the add-on is using > API permissions. To get user data, you will need to have Microsoft Graph User.Read.All.
For details on the various permissions needed for specific inputs, refer to this link -> http://bit.ly/Splunk_Azure_Permissions