search

splunk / splunk-add-on-microsoft-azure

Splunk Add-on for Microsoft Azure
Apache License 2.0
11 stars 9 forks source link

Problem creating new AAD Audit Input #3

Closed SgtMoose closed 2 years ago

SgtMoose commented 2 years ago

We just upgraded the TA to the latest version released to Splunk Cloud due to problems pulling data for Audit and Signin Inputs.

When we go to create a new AAD Audit input we receive the following error when saving the Input.

b'{"messages":[{"type":"ERROR","text":"The following required arguments are missing: AAD_sign_in_note."}]}'

Inputs - Google Chrome 2022-07-13 09 58 04

JasonConger commented 2 years ago

A fix has been committed to the repo. As an immediate workaround, you can create the input by creating/modifying local/inputs.conf

https://github.com/splunk/splunk-add-on-microsoft-azure/wiki/Configure-Azure-Active-Directory-Audit-inputs-for-the-Splunk-Add-on-for-Microsoft-Azure#configure-inputs-using-configuration-files

SgtMoose commented 2 years ago

Appreciate the quick response Jason but we are a Splunk Cloud customer and will wait to see the updated TA with the fix made available to Splunk Cloud since we do not have direct backend access to create inputs.

Do you know how long it will take for the fixed version to make it to Splunk Cloud?

JasonConger commented 2 years ago

Version 4.0.2 is available on Splunkbase and Splunk Cloud