Thanks for your suggestions.
The debug modifications resulted in the following output:
2020-04-03 15:20:33,490 DEBUG pid=3750 tid=MainThread file=base_modinput.py:log_debug:286 | _Splunk_ HTTP_PROXY: {'username': '', 'proxy_hostname': u'proxy.foo.bar', 'password': '', 'proxy_port': 9090}
This all looks as expected except for the "u" character sitting between the proxy_hostname field and value. Could this be an issue? No idea where that came from, and checking in the inputs tab of the TA, the proxy is clearly configured as "proxy.foo.bar".
The proxy test script worked using the same Connection String and Event Hub Name provided to the TA, and we were able to receive logs.
To me this means that the issue isn't in the Azure variables we're using here, and there's clearly an problematic difference between how the Python test script polls the Event Hub and what the TA is configured to do. Exactly what it is, I haven't been able to figure out.
Any further advice you could provide would be greatly appreciated.
... View more