Input page not loading on IDM for Microsoft Azure add-on
Fix:
Microsoft Azure add-on for splunk application installed on IDM which was previously working and user was able to on setup several Event Hub data inputs without any issues. Now user needs to add another input and modify some of the existing inputs but when they go to Settings > data inputs it is not working as expected. The input configuration page keeps spinning with loading.
Run the search below on the search head to find the errors:
index=_internal component=AdminManagerExternal log_level=ERROR
Look for the affected App in this case
File "/opt/splunk/etc/apps/TA-MS-AAD/bin/ta_ms_aad/aob_py3/splunktaucclib/rest_handler/handler.py"
It seems that this is caused by a lock generated between the 3rd party data provider, in this case Microsoft, and the application if an incorrect credentials is keyed in. By removing the local files that save those credentials, in this case the following:
inputs.conf
ta_ms_aad_settings.conf
ta_ms_aad_account.conf
passwords.conf
From the /opt/splunk/etc/apps/TA-MS-AAD/local directory and restarting the IDM, we remove the lock and force Splunk to request a re-keying of the credentials to move forward, allowing you to once again load the Inputs page and the Configuration page of the Microsoft Azure Add-on for Splunk.
