I have the template installed on a SH and the Azure collection apps (MSCS, Azure Monitor etc) are all installed on on a HF
If i run the search to list the subscriptions on the HF all good as thats where the config is .. but running on the SH displays no answer. and an error
Failed to fetch REST endpoint uri=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_microsoft-cloudservices/configs/conf-mscs_azure_r... from server https://127.0.0.1:8089. Check that the URI path provided exists in the REST API. Learn More
Failed to fetch REST endpoint uri=https://127.0.0.1:8089/servicesNS/nobody/Splunk_TA_microsoft-cloudservices/configs/conf-mscs_azure_a... from server https://127.0.0.1:8089. Check that the URI path provided exists in the REST API. Learn More
search is :
| rest /servicesNS/nobody/Splunk_TA_microsoft-cloudservices/configs/conf-mscs_azure_resource_inputs | append [ | rest /servicesNS/nobody/Splunk_TA_microsoft-cloudservices/configs/conf-mscs_azure_audit_inputs] | stats count by subscription_id
So i tried adding the HF as a remote host but i still do not get any subscriptions showing :
| rest splunk_server=remote_HF /servicesNS/nobody/Splunk_TA_microsoft-cloudservices/configs/conf-mscs_azure_resource_inputs | append [ | rest splunk_server=remote_HF /servicesNS/nobody/Splunk_TA_microsoft-cloudservices/configs/conf-mscs_azure_audit_inputs] | stats count by subscription_id
