MSCloud App was working until 9-11 - now receive " AF50005","message":"An internal error occurred. Retry the request."
Nothing was changed that we're aware of on our end.
Anyone else recently experiencing that issue? around that date?
ode_line_no=244 | [input_name="O365 Mgt_Audit.Exchange" account="Splunk" data="Audit.Exchange" proxy_rdns="0" proxy_enabled="0" proxy_type="http" ]Fail to get evts for $audit_exchange$Audit_Exchange, reason Traceback (most recent call last):
File "/opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/bin/splunktamscs/o365_content.py", line 240, in get_events
self.do_get_events(content_dict)
File "/opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/bin/splunktamscs/o365_content.py", line 256, in do_get_events
events = self.get_one_content(content_dict)
File "/opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/bin/splunktamscs/o365_content.py", line 154, in get_one_content
return self._content_request(url=content_info[c.content_uri])
File "/opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/bin/splunktamscs/o365_content.py", line 124, in _content_request
raise ome.O365GetContentError(msg + http_resp.msg)
O365GetContentError: Account Splunk [proxy_rdns="0" proxy_enabled="0" proxy_type="http" ] GET request to https://manage.office.com/api/v1.0/#here/activity/feed/audit/#here$audit_exchange$Audit_Exchange failed, reason: 500, {"error":{"code":"AF50005","message":"An internal error occurred. Retry the request."}}
2017-09-18 16:14:02,161 +0000 log_level=INFO, pid=24969, tid=Thread-28, file=o365_helper.py, func_name=request, code_line_no=123 | [proxy_rdns="0" proxy_enabled="0" proxy_type="http" ] Finished sending GET request to https://manage.office.com/api/v1.0/#here/activity/feed/audit/#here$audit_exchange$Audit_Exchange
2017-09-18 16:14:02,164 +0000 log_level=ERROR, pid=24969, tid=T
↧