Splunk Add-on for Microsoft Office 365 - Message trace input error

[Slovator137]

I am running into issues with the message trace input. Everything is set up correctly and all other inputs from the app are working as intended. I double checked that the right permissions were added on Azure side. 

I keep running into this same error code with too many 500 error responses. One of the things we have tried on our end is reducing the query window size, but that didn't help.

Please advise.

requests.exceptions.RetryError: HTTPSConnectionPool(host='reports.office365.com', port=443): Max retries exceeded with url: /ecp/reportingwebservice/reporting.svc/MessageTrace?$filter=StartDate%20eq%20datetime'2025-12-28T10:18:16Z'%20and%20EndDate%20eq%20datetime'2025-12-28T10:19:16Z' (Caused by ResponseError('too many 500 error responses'))

[sadek_abelnaser]

we are facing the same Issue and we  found this link but still facing the same issue although we decreased the  query_window_size to 5 minutes.
https://splunk.my.site.com/customer/s/article/Message-trace-log-ingestion-failure-in-the-Splunk-Add-...

[kamwill]

We have exactly the same issue. Have you found any solution?

[Slovator137]

We have not found any solutions to this issue for now. Hoping someone else might chime in with a solution.