Trend Vision One for Splunk (XDR) input and configuration error

[Chaiyaphat]

I just install Trend Vision One for Splunk (XDR) apps on my heavy forwarder and tried to config input on it, but I got the error 'Something went wrong'.

[thahir]

@Chaiyaphat Can you get more info about this error from the Splunkd logs or execute the below spl in the SH for better understanding about the issue.

index=_internal source="*splunkd.log" OR source="*splunkweb.log" log_level=ERROR

[ekkarat_hua]

There is no error that relate to this apps.

[livehybrid]

Hi @Chaiyaphat 

Have you already configured your XDR Account under the "Accounts" tab of the app? If not I think you might need to do this first before continuing to create the input.

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful

• Marking it as the solution if it resolved your issue

• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing.

[ekkarat_hua]

I don't see the account tabs that you mention. Input and Configuration menu is also unaccessible.