All Apps and Add-ons

Splunk Add-on for Microsoft Security Failed to load Inputs Page

ryan_629
Explorer

I recently installed the Splunk Add-on for Microsoft Security to Splunk Cloud and configured it to connect via API to an app registered in Azure. The data is still not loading on the Security section of the Microsoft 365 App for Splunk. I checked in Azure and Incident.Read has permissions enabled on the app. The Splunk documentation says that I should go to Add-on > Inputs and click Create New Input to complete the configuration. When I go to the Inputs page I get the message: "Failed to load Inputs Page
This is normal on Splunk search heads as they do not require an Input page. Check your installation or return to the configuration page. Error: Request failed with status code 500". 

I am not sure how I can fix this as I have no other place to put the endpoints as Inputs.

Labels (2)
0 Karma
1 Solution

VatsalJagani
SplunkTrust
SplunkTrust

@ryan_629 - This is common in the classic Splunk cloud environment as it removes the inputs.conf.spec file and inputs.conf files.

These files are necessary to collect the data and also to load the Add-on UI.

 

You have two options:

 

I hope this helps!! Karma/upvote would be appreciated!!!

View solution in original post

VatsalJagani
SplunkTrust
SplunkTrust

@ryan_629 - This is common in the classic Splunk cloud environment as it removes the inputs.conf.spec file and inputs.conf files.

These files are necessary to collect the data and also to load the Add-on UI.

 

You have two options:

 

I hope this helps!! Karma/upvote would be appreciated!!!

ryan_629
Explorer

Thanks very much, I will try this

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...