Using the auth0 add on not seeing any data

[rkeller_splunk]

HI

Set up the add on on a cloud instance. Not seeing any data come in via HEC. Any ideas on how to troubleshoot?

Thanks

[deepakc]

Start by checking the logs

These can also be set via the GUI

$SPLUNK_HOME/bin/splunk set log-level HTTPServer -level DEBUG
$SPLUNK_HOME/bin/splunk set log-level HttpInputDataHandler -level DEBUG
$SPLUNK_HOME/bin/splunk set log-level TcpInputProc -level DEBUG

Remember to set back to WARN once you have finished debugging

Then search - this may give you some clues for you to further investigate

index=_internal source=*splunkd.log* (component=HttpInputDataHandler OR component=TcpInputProc OR component=HTTPServer)