Splunk Add-on for Microsoft Cloud Services - Compatible with Free?

[jhagerty]

Is anyone running the Splunk Add-on for Microsoft Cloud Services with Splunk Free?

We had it installed and working, then about the time our Enterprise trial expired, the add-on stopped collecting data. In the splunkd.log file i see:

05-06-2019 17:22:16.955 +0000 ERROR AdminManagerExternal - External handler failed with code '1' and output: 'REST ERROR[403]: Unauthorized client for the requested action - capability=ta_mscs_system_configuration'.  See splunkd.log for stderr output., 

I can find nowhere where this dependency is listed, but the timing seems right and I don't want to spend a huge amount of time troubleshooting something that can't be made to work.

Thanks for any help.

[adonio]

check the splunkd.log also look into the capability that is mention by clicking access controls under setting
please share with us your findings