Hi All,
We are currently in-progress of onboarding the okta identity cloud logs, we are using Splunk built add-on for okta identity cloud. when we configure input for test instance of okta cloud it works perfectly fine, but we are configuring the input for okta cloud production logs are not coming in.
we have tried below steps.
- Disabling and re-enabling the input.
- Deleting and re-creating the input.
- Creating a new API input in Okta.
- Changing the configuration items to high and low values.
- Changed the interval to higher values.
- Reviewed internal logs for errors.
- Testing the API key locally (which was successful).
- Configured the API key in different heavy forwarder
While checking on okta side it shows rate limit warning.
Any help would be very appreciated.
Thanks,
Bhaskar Chourasiya
