Hi Splunkers, I have a Heavy Forwarder using this IA-G Suite Add-on app. The app worked properly last year, but now is having some issues to retrieve the data from the API. In _internal index show the following error:       2020-07-15 10:31:39,492 log_level=ERROR pid=11773 tid=MainThread file="ModularInput.py" function="print_error" line_number="659" version="GSuiteForSplunk.v1.3.1.b261" host=IA-GSuiteForSplunk sourcetype=IA-GSuiteForSplunk:error source=gapps:EXAMPLE.COM {"errors": [{"msg": "<HttpError 500 when requesting https://www.googleapis.com/discovery/v1/apis/drive/v3/rest returned \"Backend Error\">", "input_name": "ga://activity", "filename": "GoogleAppsForSplunkModularInput.py", "exception_type": "HttpError", "line": 511, "exception_arguments": "<HttpError 500 when requesting https://www.googleapis.com/discovery/v1/apis/drive/v3/rest returned \"Backend Error\">"}], "log_level": "ERROR", "timestamp": "Wed, 15 Jul 2020 14:31:39 +0000"}         Its shows that the problem could be in the G Suite side, but we can't find any clue what could it be   Thanks You so much! ... View more

Hi everyone, I just want to know if is there some impact changing the hostname of a linux machine. (Only the hostname not the instance) Thanks! ... View more

Hi there, I noticed that the URL path for the MaxMind ASN Database has changed on, to another path, and the siem can research for the file. When I tried to put the new path, I realize that the zip file has a folder with two files and it is unreadable for the Splunk ¿Anyone has the same problem? ¿Is there another way to update the threat intelligence with IP Geolocation? Best Regards, Jose León ... View more