I'm attempting to use the "post data" action of the Splunk app in Phantom.
I'm fairly certain that I've correctly configured an asset for the app to use because the "Test Connectivity" button works and other actions on the Splunk app, such as "get host events" work fine and succeed.
Whenever I try to run the post data action however, the action fails with Message: "Splunk server returned error from API call"
Is there any way to get more detailed of an error message, i.e. what error the API call returned? Are there logs I can look at somewhere?
Thanks for any help / suggestions.
... View more