Getting Data In

Add-On for Microsoft Security: Can't access Inputs or Configuration page

WForfa
New Member

Hi there! 

I am attempting to set up the Microsoft Security Add-On on our Splunk Cloud (Victoria Experience). 

I was able to install the app on the Splunk Cloud Platform, and understand my next step is to configure the app to connect to Azure AD. 

I receive the following errors on the Configuration and Inputs tabs:

WForfa_0-1695043676377.png

WForfa_1-1695043699967.png

 

I confirmed that the sc_admin role has all the needed permissions, and that my account has the role sc_admin. I also confirmed that the list_inputs permission is assigned (the closest post I could find on Splunk Answers said to check this). 

Any ideas what I should check next? Thank you!

 

 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...