After the configuration of Okta SPlunk TA app I see the following error in _internal
HTTPError: 401 Client Error: Unauthorized for url: https://XXXYYZZZ.com/api/v1/logs
I verified the token used is active .