we are trying to pull Lastpass log into Splunk . but we are facing issue as noting is getting indexed for Reporting logs in Splunk using. whereas as the shared path and user are working fine.
after the checking the log file found out the below error.
2021-04-05 10:02:37,299 CRITICAL pid=14060 tid=MainThread file=base_modinput.py:log_critical:316 | Lastpass identity collection. Error in forwarding data: Traceback (most recent call last):
File "C:\Program Files\Splunk\etc\apps\TA-lastpass\bin\input_module_lastpass_event_reporting.py", line 371, in collect_events
event_time = event_time.strftime('%s.%f')
ValueError: Invalid format string
2021-04-05 10:02:37,301 ERROR pid=14060 tid=MainThread file=base_modinput.py:log_error:309 | Get error when collecting events.
Traceback (most recent call last):
File "C:\Program Files\Splunk\etc\apps\TA-lastpass\bin\ta_lastpass\aob_py3\modinput_wrapper\base_modinput.py", line 128, in stream_events
self.collect_events(ew)
File "C:\Program Files\Splunk\etc\apps\TA-lastpass\bin\lastpass_event_reporting.py", line 68, in collect_events
input_module.collect_events(self, ew)
File "C:\Program Files\Splunk\etc\apps\TA-lastpass\bin\input_module_lastpass_event_reporting.py", line 391, in collect_events
raise e
File "C:\Program Files\Splunk\etc\apps\TA-lastpass\bin\input_module_lastpass_event_reporting.py", line 371, in collect_events
event_time = event_time.strftime('%s.%f')
ValueError: Invalid format string
ADD ON : https://splunkbase.splunk.com/app/2633/#/details
Could someone please help me to get this issue resolve.
We're also having the same issue. Did you find a resolution?
Did this get resolved? I am running into the exact issue and errors.