All Apps and Add-ons
Highlighted

Microsoft Teams AddOn and Splunk Cloud

Engager

Hi, I'm trying to configure the Teams Add-on for Splunk (https://splunkbase.splunk.com/app/4994) on Splunk Cloud and I have gotten the UserReport working just fine, but none of the other data works.  I have created a WebHook pointing to idm-xx.splunkcloud.com to ingest the CDR data, but I have received no traffic into it.

I've granted all the privileges to the Azure App that are called for in the detailed directions.  

In fact, nothing but the User Reports are working.  Is there a step I'm missing?

 

Labels (1)
0 Karma
Highlighted

Re: Microsoft Teams AddOn and Splunk Cloud

Engager

I got it resolved; apparently I need to learn to read better :). You can't install the Add-on in Splunk Cloud, it has to be on a heavy forwarder.  Once I did that and fixed the webhook (details here: https://community.splunk.com/t5/All-Apps-and-Add-ons/Ingesting-logs-from-Microsoft-Teams/m-p/506860/...), everything is working fine!  Thanks!

Tags (3)
0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.