When attempting to connect to get objects from the OCI bucket (get_objs_from_bucket), the following error is returned: Exception: AWS HTTP request return status code 403 (Forbidden): The required information to complete authentication was not provided. I am not confident that I've entered the oraclecloud.com endpoint correctly. How do I confirm we are using the correct endpoint, and would an invalid endpoint lead to the 403 exception we're seeing? ... View more

In our inputs.conf we have a default ignoreOlderThan=3d value set, but I would like to override that default for a specific monitor (source) entry. I have tried using ignoreOlderThan=0d as well as ignoreOlderThan=disabled but they both result in an "Invalid value for parameter 'ignoreOlderThan'" error in the splunkd.log. Is there a value that equates to disabling the ignoreOlderThan setting for a specific monitor/source without applying it to the entire inputs.conf? ... View more