Microsoft Cloud Add-On Checkpoint,Splunk Microsoft Cloud Add-On Checkpoint

[jp_elizabeth]

Does anyone know where the Microsoft Cloud Add-On stores the checkpoint for retrieving data? I'm assuming there's one in place otherwise there would be duplicate data each time the API is polled by the Add-On.

Alternatively is there a way of telling the Add-on how far back to pull data from?,Does anyone know where the Add-on stores the checkpoint for retrieving data? I'm assuming there's one in place otherwise you'd be pulling duplicate data every time the add-on polls the API.

[jp_elizabeth · Accepted solution]

I found the checkpoints, they are stored in /apps/splunk/var/lib/splunk/modinputs/ms_o365_management