This was an issue with input_module_aperture.py trying to get token from api.aperture.paloaltonetworks.com which is an America only server.
We will work on updating this in the next release.
For anyone else having this issue please update Splunk_TA_paloalto/bin/input_module_aperture.py
replace api.aperture.paloaltonetworks.com with the correct aperture API server for your region. Three lines need to be updated listed below.
line 37
line 78
line 96
There are 3 aperture API servers. Please select the correct API server for your region.
America (api.aperture.paloaltonetworks.com),
EMEA (api.aperture-eu.paloaltonetworks.com),
APAC (api.aperture-apac.paloaltonetworks.com)
Thanks again for reporting this.
... View more