Getting Data In

Missing "Ingest Settings" tab in the asset settings in Splunk Phantom

ayuri
Engager

Hi, I'm getting this message from save_container():
"Container addition failed, reason from server: Asset myasset (7) does not support ingestion."
I've added all roles and users in the asset settings (including automation) but it still fails with the same error
How do I enable the ingestion?
Thanks
PS: This is Splunk Phantom version 4.9.34514, there is no "Ingest Settings" tab as mentioned in https://docs.splunk.com/Documentation/Phantom/4.9/Admin/AppsAssets

Labels (1)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...