Issues With Cisco Security Cloud app

[dm1]

The documentation of this app and the issues I am facing with this app is quite shocking. 

1. Firstly, no documentation on how to migrate from deprecated Estreamer addon to this new "app"
2. After I installed the app, I keep getting this error even if opened browser in incognito mode
   
3. Doc mentions the below but there is literally ZERO logs in this file. 

   Tracks input creation, connectivity to Cisco APIs, and error responses from connectors.

   $SPLUNK_HOME/var/log/splunk/CiscoSecurityCloud/CiscoSecurityCloud.log

4. After looking at some other posts, seems like this is a pretty common issue but struggled to find a solution to make this work.
5. Here they say "Modify the outputs.conf file to store the _internal index locally" Pretty strange

Can someone please help with this ?

[dm1 · Accepted solution]

Works well with 4.0.1 version.