Hi,
I installed the add-on on heavy forwarder in DMZ and configured it as per the documentation. It works then stops incrementing data. Below are the errors in the internal logs. Should Azure have access to the server on 8000 with public IP?
Errors:
GET request to https://manage.office.com/api/v1.0/1233434454556/ServiceComms/CurrentStatus failed, reason: 500, System.Collections.Generic.KeyNotFoundException: The given key was not present in the dictionary.
at System.Collections.Generic.Dictionary`2.get_Item(TKey key)
Subscription request failed, [proxy_enabled="false" proxy_type="http" proxy_rdns="false" ] GET request to https://manage.office.com/api/v1.0/3443546767878445645/activity/feed/subscriptions/list exception, reason Traceback (most recent call last):
Need some help understand which app you installed, and for what reason.
I'm not sure what you're trying to do, but anything targeting port 8000 on a splunk machine will get the UI. If you want API access, or KV store access, or a number of anything else, it's a different port all together.