Hi,
We are using Microsoft log analytics for getting Azure security logs to Splunk, but it has not been working properly for sometime and is stopping at certain times and not picking up the logs and not throwing any error logs in the ta_ms_loganalytics_log_analytics.log file. It is same logs when it is receiving and it is the same when it has stopped receiving. Please help me find the issue. Sample logs in the ta_ms_loganalytics_lo_analytics.log file:-
2019-03-28 18:57:54,199 INFO pid=109248 tid=MainThread file=connectionpool.py:_new_conn:758 | Starting new HTTPS connection (1): 127.0.0.1
2019-03-28 18:58:18,531 INFO pid=109248 tid=MainThread file=connectionpool.py:_new_conn:758 | Starting new HTTPS connection (1): 127.0.0.1
2019-03-28 18:58:56,807 INFO pid=109248 tid=MainThread file=setup_util.py:log_info:114 | Log level is not set, use default INFO
2019-03-28 18:58:56,807 INFO pid=109248 tid=MainThread file=splunk_rest_client.py:_request_handler:100 | Use HTTP connection pooling
2019-03-28 18:58:56,810 INFO pid=109248 tid=MainThread file=connectionpool.py:_new_conn:758 | Starting new HTTPS connection (1): 127.0.0.1
2019-03-28 18:58:56,884 INFO pid=109248 tid=MainThread file=log.py:info:103 | cfa5bb5d-3345-4f14-89a0-3ee3c9282adf - TokenRequest:Getting token with client credentials.
2019-03-28 18:58:57,487 INFO pid=109248 tid=MainThread file=log.py:info:103 | cfa5bb5d-3345-4f14-89a0-3ee3c9282adf - OAuth2Client:Get Token Server returned this correlation_id:xxxxxxxxxxxxxxxxxxxxxxxx
(END)
