Unexpected end of JSON input for Azure Monitor

[elbrianle]

Getting the following error message:

07-10-2019 13:02:18.411 +0000 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\etc\apps\TA-Azure_Monitor\bin\azure_activity_log.cmd"" Modular input azure_activity_log://Azure_Activity_Event_Hub Error getting event hub creds: SyntaxError: Unexpected end of JSON input

has anyone been able to resolve this issue?

[marycordova]

It's not a reliable TA, if you have the ability to do so, you might consider adopting a new method of log ingestion: https://answers.splunk.com/answers/678660/how-to-get-logs-from-azure-and-o365-into-splunk.html