Splunk Enterprise v6.6.3
Splunk Add-on for Okta v1.3.0 (https://splunkbase.splunk.com/app/2806/)
I have the Splunk add-on for Okta set up in the following way:
* Metric: Application
* Interval: 21600
* Page Size: 400
However, it fails to run correctly. The Okta system log shows a "Rate limit violation". The messages I get in Splunk are:
Requests for URL pattern /api/v1/apps reached 90% of the configured threshold 100 requests per 1 MINUTES.
Time elapsed since last reset(Ms): 0. user_id: [no]
Rate limit of 100 requests per 1 MINUTES exceeded for URL pattern /api/v1/apps.
Time elapsed since last reset(Ms): 6846. user_id: [no]
I've tried changing the interval, but that didn't work, because the interval is the time between call batches, not limiting the number of calls per batch. Changing the page size doesn't appear to make a difference either.
What should I do?
↧