jconger [Splunk]
Will a newer version be [re]released any time soon? I see some on the forum mentioning 1.1.3, when splunkbase only has 1.1.0.
I ask, because like several others, a fresh install of 1.1.0 is getting 404 for the data in continuous mode. When I tried an index-once, it successfully downloaded ~2 weeks of events.
2018-10-02 16:57:10,598 DEBUG pid=7676 tid=MainThread file=binding.py:get:664 | GET request to https://127.0.0.1:8089/servicesNS/nobody/TA-MS_O365_Reporting/storage/collections/config/TA_MS_O365_Reporting_checkpointer (body: {})
2018-10-02 16:57:10,599 INFO pid=7676 tid=MainThread file=connectionpool.py:_new_conn:758 | Starting new HTTPS connection (1): 127.0.0.1
2018-10-02 16:57:10,602 DEBUG pid=7676 tid=MainThread file=connectionpool.py:_make_request:387 | "GET /servicesNS/nobody/TA-MS_O365_Reporting/storage/collections/config/TA_MS_O365_Reporting_checkpointer HTTP/1.1" 200 5516
2018-10-02 16:57:10,604 DEBUG pid=7676 tid=MainThread file=binding.py:new_f:71 | Operation took 0:00:00.005000
2018-10-02 16:57:10,604 DEBUG pid=7676 tid=MainThread file=binding.py:get:664 | GET request to https://127.0.0.1:8089/servicesNS/nobody/TA-MS_O365_Reporting/storage/collections/config/ (body: {'search': 'TA_MS_O365_Reporting_checkpointer', 'count': -1, 'offset': 0})
2018-10-02 16:57:10,605 DEBUG pid=7676 tid=MainThread file=connectionpool.py:_make_request:387 | "GET /servicesNS/nobody/TA-MS_O365_Reporting/storage/collections/config/?search=TA_MS_O365_Reporting_checkpointer&count=-1&offset=0 HTTP/1.1" 200 7407
2018-10-02 16:57:10,607 DEBUG pid=7676 tid=MainThread file=binding.py:new_f:71 | Operation took 0:00:00.003000
2018-10-02 16:57:10,611 DEBUG pid=7676 tid=MainThread file=binding.py:get:664 | GET request to https://127.0.0.1:8089/servicesNS/nobody/TA-MS_O365_Reporting/storage/collections/data/TA_MS_O365_Reporting_checkpointer/MYORG_continuous_obj_checkpoint (body: {})
2018-10-02 16:57:10,614 DEBUG pid=7676 tid=MainThread file=connectionpool.py:_make_request:387 | "GET /servicesNS/nobody/TA-MS_O365_Reporting/storage/collections/data/TA_MS_O365_Reporting_checkpointer/MYORG_continuous_obj_checkpoint HTTP/1.1" 404 140
2018-10-02 16:57:10,615 DEBUG pid=7676 tid=MainThread file=base_modinput.py:log_debug:286 | Start date: 2018-10-01 00:00:00, End date: 2018-10-01 00:30:00
2018-10-02 16:57:10,615 DEBUG pid=7676 tid=MainThread file=base_modinput.py:log_debug:286 | Endpoint URL: https://reports.office365.com/ecp/reportingwebservice/reporting.svc/MessageTrace?$filter=StartDate eq datetime'2018-10-01T00:00:00Z' and EndDate eq datetime'2018-10-01T00:30:00Z'
2018-10-02 16:57:10,615 INFO pid=7676 tid=MainThread file=setup_util.py:log_info:114 | Proxy is not enabled!
2018-10-02 16:57:10,619 DEBUG pid=7676 tid=MainThread file=connectionpool.py:_new_conn:809 | Starting new HTTPS connection (1): reports.office365.com
2018-10-02 16:57:10,974 DEBUG pid=7676 tid=MainThread file=connectionpool.py:_make_request:400 | https://reports.office365.com:443 "GET /ecp/reportingwebservice/reporting.svc/MessageTrace?$filter=StartDate%20eq%20datetime'2018-10-01T00:00:00Z'%20and%20EndDate%20eq%20datetime'2018-10-01T00:30:00Z' HTTP/1.1" 404 115
2018-10-02 16:57:10,979 ERROR pid=7676 tid=MainThread file=base_modinput.py:log_error:307 | HTTP Request error: 404 Client Error: Not Found for url: https://reports.office365.com/ecp/reportingwebservice/reporting.svc/MessageTrace?$filter=StartDate%20eq%20datetime'2018-10-01T00:00:00Z'%20and%20EndDate%20eq%20datetime'2018-10-01T00:30:00Z';
... View more