I'm trying to configure the Splunk Add-on for Microsoft Cloud Services, but I'm hitting a wall here. When I provide the credentials and hit save, a new login to MS Cloud pops up. I click on my login (because I'm already logged in), but nothing happens. Does this have to do with the redirect url?
i had the same issue. i have resolved it by installing splunk on a remote server in order to have a public IP instead of localhost.
After the authentication, it can redirect and return the token code and to your SPLUNK server.
You can follow this url
use your terminal and add the data, It will not ask the microsoft credentials.
Connect to your account using configuration files
If you do not have access to Splunk Web on your data collection node, you can configure the connection to your account using the configuration files.
Create or open $SPLUNKHOME/etc/apps/SplunkTAmicrosoft-cloudservices/local/splunktamso365serveraccounts.conf.
Add the following stanza.