Hello All, We have Microsoft log analytics add-on application installed into Splunk forwarder. With which we are ingesting all the A zure log analytics workspace logs into Splunk. But, S ince few days we have observed following pitfalls. 1. Delay in the azure logs ingestion into Splunk. 2. Duplicate entries of azure logs. And on investigation, we identified the following connection errors. Errors: 10 -21-2021 13:44:42.789 + 0000 ERROR ExecProcessor - message from " python /opt/splunk/etc/apps/TA-ms-loganalytics/bin/log_analytics.py " raise Connection Error ( err , request=request) 10-21-2021 13:44:42.789 + 0000 ERROR ExecProcessor - message from " python /opt/splunk/etc/apps/TA-ms-loganalytics/bin/log_analytics.py " Connection Error : (' Connection aborted. ', BadStatusLine ("''",)) Can anyone help us out with the following ask? 1. What is the cause behind this error? 2. How can we resolve this error/issue and get all the azure logs without delay?
... View more