Microsoft Add-on for reporting to monitor the message trace logs

[Nadhiyaa]

ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-MS_O365_Reporting/bin/ms_o365_message_trace.py" ConnectionError: HTTPSConnectionPool(host='reports.office365.com', port=443): Max retries exceeded with url: /ecp/reportingwebservice/reporting.svc/MessageTrace?$filter=StartDate%20eq%20datetime'2018-08-02T10:15:52.143955Z'%20and%20EndDate%20eq%20datetime'2018-08-02T11:15:52.143955Z' (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 101] Network is unreachable

I am trying the integrate with Microsoft add-on for reporting to track the message trace logs .

Getting the above error.

[deepashri_123]

Hey@Nadhiyaa,

This seems to be a connectivity issue. Can you check if you are able to connect to the source server.Also check if splunk forwarder has permissions to read the files.

Let me know if this helps!!

[Nadhiyaa]

@deepashri_123

Message trace logs indexed for only once .
How to troubleshoot this for continuous logs