We're receiving the error below repeatedly when trying to integrate Splunk with Crowdstrike using the provided Splunkbase add-ons. The API credentials are correct and the Crowdstrike tenant is populated with some detections and incidents. Please advise.
2020-10-01 18:51:36,664 DEBUG pid=7904 tid=MainThread file=connectionpool.py:_new_conn:959 | Starting new HTTPS connection (1): api.us-2.crowdstrike.com:443
2020-10-01 18:51:38,016 DEBUG pid=7904 tid=MainThread file=connectionpool.py:_make_request:437 | https://api.us-2.crowdstrike.com:443 "POST /oauth2/token HTTP/1.1" 201 1200
2020-10-01 18:51:38,017 INFO pid=7904 tid=MainThread file=base_modinput.py:log_info:295 | Successfully retrieved OAuth2 API token
2020-10-01 18:51:38,344 DEBUG pid=7904 tid=MainThread file=connectionpool.py:_make_request:437 | https://api.us-2.crowdstrike.com:443 "GET /sensors/entities/datafeed/v2?appId=DSR9a&format=json HTTP/1.1" 404 196
2020-10-01 18:51:38,345 ERROR pid=7904 tid=MainThread file=base_modinput.py:log_error:309 | Unable to access data streams. Error Code: 404 - Error Message: resource not found
2020-10-01 18:51:38,348 ERROR pid=7904 tid=MainThread file=base_modinput.py:log_error:309 | Get error when collecting events.
Traceback (most recent call last):
File "E:\Splunk\etc\apps\TA-crowdstrike-falcon-event-streams\bin\ta_crowdstrike_falcon_event_streams\aob_py3\modinput_wrapper\base_modinput.py", line 128, in stream_events
self.collect_events(ew)
File "E:\Splunk\etc\apps\TA-crowdstrike-falcon-event-streams\bin\crowdstrike_event_streams.py", line 71, in collect_events
input_module.collect_events(self, ew)
File "E:\Splunk\etc\apps\TA-crowdstrike-falcon-event-streams\bin\input_module_crowdstrike_event_streams.py", line 346, in collect_events
crowdstrike_client()
File "E:\Splunk\etc\apps\TA-crowdstrike-falcon-event-streams\bin\input_module_crowdstrike_event_streams.py", line 234, in crowdstrike_client
num_feeds = len(response['resources'])
UnboundLocalError: local variable 'response' referenced before assignment
