We’ve installed the NERM Add-On for Splunk from Colab, and we’re observing normal activity logs that reflect the Activity logs in the Admin console of NERM itself, but we are also seeing a lot of 404 errors in the Splunk logs showing up, seemingly during periods where NERM is not being used heavily. Does anyone know if the Add-On return 404s whenever there is no new NERM Activity log present to pull into Splunk?
Hey @sfraser_snhu,
I would post this question on the colab topic Non-Employee Risk Management Splunk Add-on and the owner of that particular colab item may be able to answer your question!
Thanks… I’m not allowed to post on that topic. It doesn’t come up as an option for me when I hit New Topic, and if I go there directly, the New Topic button is greyed out.
I tried replying on the main announcement post you linked, maybe someone will see it there.
@sfraser_snhu We haven’t encountered the specific scenario ourselves, but if that’s indeed the case, you’re welcome to make any necessary changes or updates. Since the add-on is open source, you have the flexibility to implement the solution that best resolves the issue.
-Thanks,
Dhara Shah