All Apps and Add-ons

O365 Azure Active Directory add on in Splunk stops processing

jsalsbur
Explorer

Good morning
We are seeing an issue with the O365 add in for Splunk where the Azure Active Directory stop processing and sending logs. Once we restart Splunk on that particular server it comes back and works again but after a day or so it seems to hang and stop again. The other Workloads still are processing, Just Azure Active Directory stops. Has anyone else seen this and been able to resolve it?

Thanks
Jason

Tags (1)
0 Karma
1 Solution

mattchiste
Explorer

We saw the same problem until we upgraded to the latest version of the app, which handles large data sets better. Are you on the latest rev?

View solution in original post

0 Karma

jsalsbur
Explorer

I am trying that right now thanks.

0 Karma

mattchiste
Explorer

We saw the same problem until we upgraded to the latest version of the app, which handles large data sets better. Are you on the latest rev?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...