07-15-2019 11:23:04.955 -0400 ERROR ExecProcessor - message from "/opt/splunk/etc/apps/TA-Azure_Monitor/bin/azure_activity_log.sh" Modular input azure_activity_log://AzureSecurityEventHubUSEast2-NonProd Error getting event hub creds: SyntaxError: Unexpected end of JSON input
I have regenerated the app id and key as by that error, as it sure looks like an authentication issue to me, still get the same error.
Any idea on how to resolve this?