Has anyone had success integrating Slack Audit Logs without using a legacy token? Slack support has said using a legacy token, which the Splunk TA requires, is no longer recommended/supported and advises the use of the Audit Logs API key and Enterprise Grid app. More information can be found here: https://api.slack.com/docs/audit-logs-api ... View more

Hello, Splunk ExecProcessor is rescheduling a specific cronjob for the Rapid7 Nexpose add-on; rapid7nexpose.py is being rescheduled at nearly every interval, even if I set it to run every minute. From splunkd.log: ExecProcessor - setting reschedule_ms=3599999, for command=python /opt/splunk/etc/apps/TA-rapid7_nexpose/bin/rapid7nexpose.py I have checked and all files are splunk:splunk with the following permissions: -rwxr-xr-x Authentication with the Nexpose device is successful since we do occassionally get a job to run and fetch the logs. Any help would be greatly appreciated as Splunk support will not assist. ... View more