Hi, I'm getting this message from save_container(): "Container addition failed, reason from server: Asset myasset (7) does not support ingestion." I've added all roles and users in the asset settings (including automation) but it still fails with the same error How do I enable the ingestion? Thanks PS: This is Splunk Phantom version 4.9.34514, there is no "Ingest Settings" tab as mentioned in https://docs.splunk.com/Documentation/Phantom/4.9/Admin/AppsAssets ... View more

12-08-2020 21:54:50.912 +0000 ERROR ExecProcessor - message from "/opt/splunk/bin/python3.7 /opt/splunk/etc/apps/bitglass/bin/logeventdaemon.py" /opt/splunk/bin/python3.7: can't open file '/opt/splunk/etc/apps/bitglass/bin/logeventdaemon.py': [Errno 2] No such file or directory host=idx-i-03...c2.customer.splunkcloud.com    source=/opt/splunk/var/log/splunk/splunkd.log    sourcetype=splunkd   The customer has installed from the cloud-certified .spl app. The file path is valid according to the customer.. Any hints appreciated Thanks ... View more

Hi, I'm looking for some insight into the trade offs (if any) in using stdout vs. the  '/services/receivers/simple?' REST API for scripted input. In particular in relation to different deployment options (such as a separate forwarder etc.) Thanks   ... View more