All Apps and Add-ons

Splunk Mint add-on can't fetch data from splunk cloud

ahmedhassanean
Explorer

Dears,

i have installed Splunk Mint APP and mint APP and configure add with my API token from GUI and below is example of add-on inputs.conf despite that i couldn't retrieve anything to Splunk enterprise Please advise

[mi_cds://default]
disabled = 0
cds_token = *************************
cds_url = https://data.cds.splkmobile.com/api/v2/events
start_by_shell = 0
verify_ssl = 1

and whenever i restart splunk i got below errors :

    Invalid key in stanza [mi_cds://default] in /opt/splunk/etc/apps/Splunk_TA_mint/local/inputs.conf, line 4: cds_url  (value:  https://data.cds.splkmobile.com/api/v2/events).
    Invalid key in stanza [launcher] in /opt/splunk/etc/apps/splunk_app_mint/default/app.conf, line 22: attribution_link  (value:  http://docs.splunk.com/Documentation/Mint/latest/ProductOverview/Thirdpartysoftwarecredits).
Tags (1)
0 Karma

croyal_splunk
Splunk Employee
Splunk Employee

Please make sure the projects are owned by the same email you are using to pull data into Splunk. Check Settings > Viewer for project ownership at mint.splunk.com.

0 Karma

ahmedhassanean
Explorer

ok i have checked from mint.splunk.com but i don't know how to check from splunk side or how to add the email address in my settings

0 Karma

croyal_splunk
Splunk Employee
Splunk Employee

Please email mobilesupport@splunk.com with your mint.splunk.com login, MINT Data Collector Token, and one of your project keys.

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...