Hello All, We have Microsoft log analytics add-on application installed into Splunk forwarder. With which we are ingesting all the Azure log analytics workspace logs into Splunk. But, Since few days we have observed following pitfalls. 1. Delay in the azure logs ingestion into Splunk. 2. Duplicate entries of azure logs. And on investigation, we identified the following connection errors. Errors: 10-21-2021 13:44:42.789 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-ms-loganalytics/bin/log_analytics.py" raise ConnectionError(err, request=request) 10-21-2021 13:44:42.789 +0000 ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/TA-ms-loganalytics/bin/log_analytics.py" ConnectionError: ('Connection aborted.', BadStatusLine("''",)) Can anyone help us out with the following ask? 1. What is the cause behind this error? 2. How can we resolve this error/issue and get all the azure logs without delay?
... View more