I am trying to test the Splunk intgration from DCRUm 12.4.2 and I cannot get the customer report to work and I am not seeing anything in any logs about why it may not be working. Does anyone have some guidance on better steps to troubleshoot?
Hi Brian, sorry for keep you waiting that long. Here are 3 things I would check:
Is your report listed in the partner-export.yaml?
Is your report based only on cached data views. You would need to check that in the XML export. Only the following are supported:
As data is not being pushed to Splunk, but rather pulled by an application deployed in Splunk, have you modified our demo app or wrote your own to pull the data? This is not required for Elastic, as data is being pushed there.