There are multiple issues with the TAs, with the upgrade to the latest version 3.1.1 you actually need to delete your inputs and recreate them otherwise you get errors such as 2019-04-25 22:40:22,691 ERROR pid=6897 tid=MainThread file=base_modinput.py:log_error:307 | Get error when collecting events. Traceback (most recent call last): File "/opt/splunk/etc/apps/TA-mimecast-for-splunk/bin/ta_mimecast_for_splunk/modinput_wrapper/base_modinput.py", line 127, in stream_events self.collect_events(ew) File "/opt/splunk/etc/apps/TA-mimecast-for-splunk/bin/mimecast_ttp_url.py", line 84, in collect_events input_module.collect_events(self, ew) File "/opt/splunk/etc/apps/TA-mimecast-for-splunk/bin/input_module_mimecast_ttp_url.py", line 32, in collect_events logs = api.fetch_ttp_url_logs() File "/opt/splunk/etc/apps/TA-mimecast-for-splunk/bin/mimecast/api.py", line 121, in fetch_ttp_url_logs return self.fetch_logs(LogTypes.TTPURL) File "/opt/splunk/etc/apps/TA-mimecast-for-splunk/bin/mimecast/api.py", line 50, in fetch_logs parsed_events = parser(helper=self.helper).parse(response.content) File "/opt/splunk/etc/apps/TA-mimecast-for-splunk/bin/mimecast/parser/ttp_url.py", line 30, in parse for click_log in data_json['data'][0]['clickLogs']: IndexError: list index out of range ... View more