Hello,
I am trying to integrate Splunk (on premise) with DUO ( the DUO application is in cloud) , but I am receiving an error.
The error I am receiving is after I am entering the integration key,secret key and the API hostname in the Duo Security Add-on which I have installed it on my SH.
The integration key,secret key and the API hostname I am having is after I have configured an ADMIN Api on the DUO Applications.( I need to mention that I gave my application the following permissions: Grant read information , Grant read log and Grant read resource).
I have also tried the solution explained in the following article, to create the inputs.conf directly , but without success (Solved: DUO Splunk Connector: Error "Validation for scheme... - Splunk Community).
The Error :Encountered the following error while trying to save: The provided admin API credentials cannot get the necessary logs. Please verify that the Admin API settings are correctly configured.
Can anyone help me ?
Many thanks,
Dragos
