HI ,
Basically in the past week i have my salesforce working well but after that the salesforce just stop getting data:
here is the error using this query
**index=_internal sourcetype=sfcd:eventlog:log error**
2018-05-03 00:17:22,390 ERROR pid=4333 tid=MainThread file=base_modinput.py:log_error:307 | Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_salesforce_sh/bin/splunk_ta_salesforce/modinput_wrapper/base_modinput.py", line 113, in stream_events
self.parse_input_args(input_definition)
File "/opt/splunk/etc/apps/Splunk_TA_salesforce_sh/bin/splunk_ta_salesforce/solnlib/packages/splunklib/binding.py", line 665, in get
response = self.http.get(path, self._auth_headers, **query)
File "/opt/splunk/etc/apps/Splunk_TA_salesforce_sh/bin/splunk_ta_salesforce/solnlib/packages/splunklib/binding.py", line 1221, in request
raise HTTPError(response)
HTTPError: HTTP 404 Not Found -- {"messages":[{"type":"ERROR","text":"Application does not exist: Splunk_TA_salesforce"}]}
Can somebody help ?
HI @jadengoho,
Did you renamed the app folder name from "Splunk_TA_salesforce" to "Splunk_TA_salesforce_sh"??
If yes then it is better to keep it as it is.
Thanks
I deploy the app as "Splunk_TA_salesforce_sh" (January 1st week)
and it stops getting data in March.
Meaning it sends data for almost 3 months.
Does changing the Folder Name affect the process ?
At least that very error message is related to a different folder name, it says HTTPError: HTTP 404 Not Found -- {"messages":[{"type":"ERROR","text":"Application does not exist: Splunk_TA_salesforce"}]}
I've to admit I'm a little confused why it checks for the app, but it's worth a try.
Thanks for the advice .