Issues With Cisco Security Cloud app

[dm1]

The documentation of this app and the issues I am facing with this app is quite shocking. 

1. Firstly, no documentation on how to migrate from deprecated Estreamer addon to this new "app"
2. After I installed the app, I keep getting this error even if opened browser in incognito mode
   dm1_0-1785386070674.png
3. Doc mentions the below but there is literally ZERO logs in this file. 

   Tracks input creation, connectivity to Cisco APIs, and error responses from connectors.

   $SPLUNK_HOME/var/log/splunk/CiscoSecurityCloud/CiscoSecurityCloud.log

4. After looking at some other posts, seems like this is a pretty common issue but struggled to find a solution to make this work.
5. Here they say "Modify the outputs.conf file to store the _internal index locally" Pretty strange

Can someone please help with this ?

[dm1 · Accepted solution]

Works well with 4.0.1 version.