Getting Data In

Splunk Add on for Microsoft Azure Secure Score- How to resolve this error?

paulmachin
New Member

Hi, 

I am working with the Splunk Add on for Microsoft Azure and im trying to get the Secure Score working with it, has anyone had any luck with getting it working? 

At the moment it looks like I need to do it s the input being a resource graph, but it doesn't seem to be pulling that data through. It has been set up with the reader IAM role for the correct subscription (as suggested by their documentation) 

The error I seem to be getting in splunk is as follows: 

 

 

File "/opt/splunk/etc/apps/TA-MS-AAD/lib/requests/models.py", line 1021, in raise_for_status raise HTTPError(http_error_msg, response=self) requests.exceptions.HTTPError: 400 Client Error: Bad Request for url: https://management.azure.com/providers/Microsoft.ResourceGraph/resources?api-version=2021-03-01

 

 

Any help or advice would be appreciated. 

Labels (3)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through: An introduction to the Splunk Threat ...