Is anyone running the Splunk Add-on for Microsoft Cloud Services with Splunk Free?
We had it installed and working, then about the time our Enterprise trial expired, the add-on stopped collecting data. In the splunkd.log file i see:
05-06-2019 17:22:16.955 +0000 ERROR AdminManagerExternal - External handler failed with code '1' and output: 'REST ERROR[403]: Unauthorized client for the requested action - capability=ta_mscs_system_configuration'. See splunkd.log for stderr output.,
I can find nowhere where this dependency is listed, but the timing seems right and I don't want to spend a huge amount of time troubleshooting something that can't be made to work.
Thanks for any help.
check the splunkd.log also look into the capability that is mention by clicking access controls under setting
please share with us your findings