Hi,
I have been using the Splunk Add-on for Microsoft Cloud Services on my Splunk Enterprise trial. Now that the trial period has expired it has reverted to the Free license. But this add-on has stopped working. I haven't found anywhere that says it shouldn't work with the free version, and the free version should support apps. So does anyone know why it wouldn't be working?
Splunk Web doesn't render, it just hangs saying Loading...
And if I look at the Network tab I can see that the following two calls:
/en-GB/splunkd/_raw/servicesNS/nobody/Splunk_TA_microsoft-cloudservices/splunk_ta_ms_o365/1.0/ta_o365_server_accounts?output_mode=json&count=10&sort_dir=asc&sort_key=name&search=&offset=0&=1497358763006
and
/en-GB/splunkd/_raw/servicesNS/nobody/Splunk_TA_microsoft-cloudservices/splunk_ta_ms_o365/1.0/ta_o365_server_management_api_inputs?output_mode=json&count=100&sort_dir=asc&sort_key=name&search=&offset=0&=1497358763007
are both returning 500 errors. The message in both cases is:
{"messages":[{"type":"ERROR","text":"External handler failed with code '1' and output: 'REST ERROR[403]: Unauthorized client for the requested action - capability=ta_o365_configuration'. See splunkd.log for stderr output."}]}
Does anyone have any ideas why this would not be working?
Thanks for any help,
Iain
... View more