Skip to main content

Sumo Logic has a Netskope app that can be installed and configured to use API v2 to ingest logs. I created a new token in Netskope as described in the doc. I then installed the Netskope app and created the collector in Sumo Logic. It shows healthy, but there is an error saying “ 403 - error connecting to endpoint, received 403: {“message”: You cannot consume this service”}. Any ideas whats wrong?

 

Hi ​@jschuele 

You need to change the API endpoints with the following.

  • /api/v2/events/dataexport/events/alert
  • /api/v2/events/dataexport/events/page
  • /api/v2/events/dataexport/events/infrastructure
  • /api/v2/events/dataexport/events/application
  • /api/v2/events/dataexport/events/network
  • /api/v2/events/dataexport/events/audit
  • /api/v2/events/dataexport/events/connection
  • /api/v2/events/dataexport/events/incident
  • /api/v2/events/dataexport/events/endpoint
  • /api/v2/events/data/alert

Reply