I recently ran into an issue with the Splunk Forwarder and found that we can solve it with a simple python script udpate. This is applicable to the Salesforce app for Splunk, but could be applicable to other use cases as well.
Here, the requirement was to install the Salesforce TA into Splunk and configure the TA to pull data from Salesforce into Splunk. After downloading the TA and enabling the necessary inputs from Salesforce, I checked Splunk for data…nothing.
Why isn’t the Salesforce data coming into Splunk??
Next, I went to the internal logs in Splunk by...