Thanks for the info.
Are you using Splunk Search Head to do the data collection? (The message: "Failed to fetch REST endpoint uri=https://127.0.0.1:8089/services/NS/nobody/Splunk_TA_microsoft-cloudeservices/configs/conf-splunk_ta_ms_o365_Server_certificate?count=0 from server=https://127.0.0.1:8089"). it's supported, but not recommended as mentioned in doc. For this error, it could be ignored. we will try to fix it as well in later release.
Are you using Search Head Cluster? it's highly not recommended (in doc, it's mentioned not supported). if so, you'd need a dedicated heavy forwarder to do the data collection.
would you please provide a snapshot of the troubleshooting pat when you clicking the "uploaded but invalid", what's the proposal? Meanwhile, what's the errors when you search "index=_internal sourcetype=ms:o365:jobinsight:* error"? Meanwhile, what's the errors when you search "index=_internal sourcetype=ms:o365:jobinsight:* error"?
... View more