About amyers16

amyers16 · ‎04-26-2023

Interestingly I saw it indicate in the logs it was getting data, but nothing when searching for sourcetype=o365:reporting:messagetrace

amyers16 · ‎04-26-2023

It's working for me now as well! Had to rebuild my inputs and fix the time, but otherwise seems to be ingesting correctly.

amyers16 · ‎04-18-2023

I even tried setting up a totally new instance with new app registration and still getting the same error. Not sure that is overly helpful.

amyers16 · ‎04-12-2023

I am facing the same issue, but according to the link @Wiessiet posted, it was resolved on April 6th and they are not updating the case information any longer.

amyers16 · ‎11-08-2022

Glad I am not the only one who is having this problem. I've checked permissions all over the app & on the backend and have the same problem. Thanks for the heads up on the dashboards using the wrong index.

amyers16 · ‎11-01-2022

At least for me there is no data from the lookup you indicated but to @mkirda1 's point, the error does point to lookup_sfdc_usernames_kvstore. I'll see if I can add a screenshot. I do have the lookup definition there and it's enabled. Aaron

amyers16 · ‎11-01-2022

Love to know if you get an answer to this as I'm having the same issue.

amyers16 · ‎05-20-2022

We have been using Microsoft Azure App for Splunk for some time however recently it has started throwing the 404 page not found error. I tried rolling back to a previous version but still getting the same thing. This is also happening with Microsoft 365 App for Splunk. Both were working but I can't figure out what has changed to cause them to throw the 404. CentOS 7 Splunk Enterprise 8.2.6 Thanks! Aaron

amyers16 · ‎10-26-2020

Hi @alemarzu and thanks for the reply. I am on 8.1.0 and checked the [general] stanza. Python version wasn't defined so I added it and restarted. Unfortunately still the same issue. I reached out to the dev via email and they said they'd look into it.

amyers16 · ‎10-23-2020

I'm using Splunk 8.1.0 on CentOS 7 and TA-dmarc 3.2.1. When the app loads, I get the following error: Unable to initialize modular input "dmarc_pop3" defined in the app "TA-dmarc": Introspecting scheme=dmarc_pop3: script running failed (exited with code 1) Not sure what to make of it or how to even start troubleshooting. Thanks, Aaron

amyers16 · ‎07-29-2020

I am in the same boat with this one. Anyone have suggestions?

Posts	11
Solutions	0
Karma Given	6
Karma Received	2
Member Since	‎07-29-2020

Online Status	Offline
Date Last Visited	‎04-26-2023 05:46 PM

Why is Microsoft Azure App for Splunk showing 404...

TA-DMARC scheme error

Re: Issues fetching Exchange Online message tracki...

Re: How can I fix Issues fetching Exchange Online ...

Re: Issues fetching Exchange Online message tracki...

Re: Issues fetching Exchange Online message tracki...

Re: Has anyone gotten the Splunk Salesforce app to...

Re: Has anyone gotten the Splunk Salesforce app to...

Re: Has anyone gotten the Splunk Salesforce app to...

Why is Microsoft Azure App for Splunk showing 404...

Re: TA-DMARC scheme error

TA-DMARC scheme error

Re: Unable to initialize modular input "mscs_stora...