O365 Azure Active Directory add on in Splunk stops processing

[jsalsbur]

Good morning
We are seeing an issue with the O365 add in for Splunk where the Azure Active Directory stop processing and sending logs. Once we restart Splunk on that particular server it comes back and works again but after a day or so it seems to hang and stop again. The other Workloads still are processing, Just Azure Active Directory stops. Has anyone else seen this and been able to resolve it?

Thanks
Jason

[jsalsbur]

I am trying that right now thanks.

[mattchiste · Accepted solution]

We saw the same problem until we upgraded to the latest version of the app, which handles large data sets better. Are you on the latest rev?