This section contains information for troubleshooting Splunk issues.
Issues with using Splunk to poll activity data from PingOne.
Index not populated
Getting too much data
activitiesRequestOptionsand add a filter parameter at the end of the URI that meets your objective, such as:
Not seeing status.json
STATUS_FILEconstant to point to the appropriate location, such as:
const STATUS_FILE = "/Applications/Splunk/bin/scripts/tmp/status.json";
Getting duplicate events
| dedup idfunction to manage duplicates.
Not running a local Splunk instance