SailPoint Data Connector not working - Microsoft Sentinel

Burra, Rahul 0

Hello,

Sailpoint (via azure function) data connector is not collecting logs from sailpoint. There are no errors generated by azure function. Recent invocations are all successful but, the function app is not retreiving logs from Sailpoint with the message "No Events were Returned"

Kind Regards,

Rahul

Navya 13,380 Reputation points Microsoft Vendor

2024-11-19T01:23:06.0466667+00:00

Hi @Burra, Rahul

Thank you for posting this in Microsoft Q&A.

Has this configuration worked before, or is it a new setup? To better understand the issue, could you please share a screenshot of the error message.

Thanks,

Navya.

Burra, Rahul 0

Hi Navya,

The configuration was working at the beginning but, it stopped from past 2 months. The last event was received in Sentinel on 4th September 2024. The function app was receiving below error messages

Microsoft.Azure.WebJobs.Host.FunctionInvocationException : Exception while executing function: Functions.SearchEvent ---> Microsoft.Azure.WebJobs.Script.Workers.Rpc.RpcException : Result: Failure
Exception: ImportError: /home/site/wwwroot/.python_packages/lib/site-packages/cryptography/hazmat/bindings/_rust.abi3.so: undefined symbol: PyInterpreterState_Get. Troubleshooting Guide: https://aka.ms/functions-modulenotfound
Stack: File '/azure-functions-host/workers/python/3.8/LINUX/X64/azure_functions_worker/dispatcher.py', line 314, in _handle__function_load_request
func = loader.load_function(
File '/azure-functions-host/workers/python/3.8/LINUX/X64/azure_functions_worker/utils/wrappers.py', line 42, in call
raise extend_exception_message(e, message)
File '/azure-functions-host/workers/python/3.8/LINUX/X64/azure_functions_worker/utils/wrappers.py', line 40, in call
return func(*args, **kwargs)
File '/azure-functions-host/workers/python/3.8/LINUX/X64/azure_functions_worker/loader.py', line 85, in load_function
mod = importlib.import_module(fullmodname)
File '/usr/local/lib/python3.8/importlib/__init__.py', line 127, in import_module
return _bootstrap._gcd_import(name[level:], package, level)
File '<frozen importlib._bootstrap>', line 1014, in _gcd_import
File '<frozen importlib._bootstrap>', line 991, in _find_and_load
File '<frozen importlib._bootstrap>', line 975, in _find_and_load_unlocked
File '<frozen importlib._bootstrap>', line 671, in _load_unlocked
File '<frozen importlib._bootstrap_external>', line 843, in exec_module
File '<frozen importlib._bootstrap>', line 219, in _call_with_frames_removed
File '/home/site/wwwroot/SearchEvent/__init__.py', line 14, in <module>
from azure.cosmosdb.table.tableservice import TableService
File '/home/site/wwwroot/.python_packages/lib/site-packages/azure/cosmosdb/table/__init__.py', line 25, in <module>
from azure.cosmosdb.table.tablebatch import TableBatch
File '/home/site/wwwroot/.python_packages/lib/site-packages/azure/cosmosdb/table/tablebatch.py', line 20, in <module>
from azure.cosmosdb.table._request import (
File '/home/site/wwwroot/.python_packages/lib/site-packages/azure/cosmosdb/table/_request.py', line 27, in <module>
from azure.cosmosdb.table._encryption import (
File '/home/site/wwwroot/.python_packages/lib/site-packages/azure/cosmosdb/table/_encryption.py', line 25, in <module>
from cryptography.hazmat.primitives.hashes import (
File '/home/site/wwwroot/.python_packages/lib/site-packages/cryptography/hazmat/primitives/hashes.py', line 9, in <module>
from cryptography.hazmat.bindings._rust import openssl as rust_openssl

at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Script.Description.WorkerFunctionInvoker.InvokeCore(Object[] parameters,FunctionInvocationContext context) at /src/azure-functions-host/src/WebJobs.Script/Description/Workers/WorkerFunctionInvoker.cs : 96
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Script.Description.FunctionInvokerBase.Invoke(Object[] parameters) at /src/azure-functions-host/src/WebJobs.Script/Description/FunctionInvokerBase.cs : 82
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.VoidTaskMethodInvoker`2.InvokeAsync[TReflected,TReturnType](TReflected instance,Object[] arguments) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\VoidTaskMethodInvoker.cs : 20
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.FunctionInvoker`2.InvokeAsync[TReflected,TReturnValue](Object instance,Object[] arguments) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionInvoker.cs : 52
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.InvokeWithTimeoutAsync(IFunctionInvoker invoker,ParameterHelper parameterHelper,CancellationTokenSource timeoutTokenSource,CancellationTokenSource functionCancellationTokenSource,Boolean throwOnTimeout,TimeSpan timerInterval,IFunctionInstance instance) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 581
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithWatchersAsync(IFunctionInstanceEx instance,ParameterHelper parameterHelper,ILogger logger,CancellationTokenSource functionCancellationTokenSource) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 527
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithLoggingAsync(IFunctionInstanceEx instance,FunctionStartedMessage message,FunctionInstanceLogEntry instanceLogEntry,ParameterHelper parameterHelper,ILogger logger,CancellationToken cancellationToken) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 306
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Script.Description.WorkerFunctionInvoker.InvokeCore(Object[] parameters,FunctionInvocationContext context) at /src/azure-functions-host/src/WebJobs.Script/Description/Workers/WorkerFunctionInvoker.cs : 96
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Script.Description.FunctionInvokerBase.Invoke(Object[] parameters) at /src/azure-functions-host/src/WebJobs.Script/Description/FunctionInvokerBase.cs : 82
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.VoidTaskMethodInvoker`2.InvokeAsync[TReflected,TReturnType](TReflected instance,Object[] arguments) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\VoidTaskMethodInvoker.cs : 20
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.FunctionInvoker`2.InvokeAsync[TReflected,TReturnValue](Object instance,Object[] arguments) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionInvoker.cs : 52
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.InvokeWithTimeoutAsync(IFunctionInvoker invoker,ParameterHelper parameterHelper,CancellationTokenSource timeoutTokenSource,CancellationTokenSource functionCancellationTokenSource,Boolean throwOnTimeout,TimeSpan timerInterval,IFunctionInstance instance) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 581
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithWatchersAsync(IFunctionInstanceEx instance,ParameterHelper parameterHelper,ILogger logger,CancellationTokenSource functionCancellationTokenSource) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 527
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithLoggingAsync(IFunctionInstanceEx instance,FunctionStartedMessage message,FunctionInstanceLogEntry instanceLogEntry,ParameterHelper parameterHelper,ILogger logger,CancellationToken cancellationToken) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 306
End of inner exception
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithLoggingAsync(IFunctionInstanceEx instance,FunctionStartedMessage message,FunctionInstanceLogEntry instanceLogEntry,ParameterHelper parameterHelper,ILogger logger,CancellationToken cancellationToken) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 352
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.TryExecuteAsync(IFunctionInstance functionInstance,CancellationToken cancellationToken) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 108

I had to modify the function app configuration changing the Runtime Version (to 4) and Python Version (to 3.9). I'm no longer getting above error message but, the python script is not collecting any logs and shows the below message ("No Events were returned") even though there are recent audit events in SailPoint

1/18/2024, 10:20:00 PM
Information
Client-Request-ID=28d40582-a625-11ef-b531-00155d9bdb03 Receiving Response: Server-Timestamp=Tue, 19 Nov 2024 03:19:59 GMT, Server-Request-ID=545a1154-9002-0060-2a31-3a847f000000, HTTP Status Code=200, Message=OK, Headers={'cache-control': 'no-cache', 'transfer-encoding': 'chunked', 'content-type': 'application/json;odata=minimalmetadata;streaming=true;charset=utf-8', 'etag': 'W/"datetime\'2024-09-04T04%3A30%3A00.5506966Z\'"', 'server': 'Windows-Azure-Table/1.0 Microsoft-HTTPAPI/2.0', 'x-ms-request-id': '545a1154-9002-0060-2a31-3a847f000000', 'x-ms-version': '2018-03-28', 'x-content-type-options': 'nosniff', 'date': 'Tue, 19 Nov 2024 03:19:59 GMT'}.

11/18/2024, 10:20:00 PM
Information
checkpoint_time 2024\-11\-19T02\:20\:00\.016282Z search_delay_time 2024\-11\-19T02\:20\:00\.336668Z

11/18/2024, 10:20:01 PM
Information
No Events were returned...

Burra, Rahul 0

Hi Navya

The last event was received from Sailpoint in Sentinel 2 months ago i.e., on 2 September 2024.

Below is the error message received

Microsoft.Azure.WebJobs.Host.FunctionInvocationException : Exception while executing function: Functions.SearchEvent ---> Microsoft.Azure.WebJobs.Script.Workers.Rpc.RpcException : Result: FailureException: ImportError: /home/site/wwwroot/.python_packages/lib/site-packages/cryptography/hazmat/bindings/_rust.abi3.so: undefined symbol: PyInterpreterState_Get. Troubleshooting Guide: https://aka.ms/functions-modulenotfoundStack:   File '/azure-functions-host/workers/python/3.8/LINUX/X64/azure_functions_worker/dispatcher.py', line 314, in _handle__function_load_request    func = loader.load_function(  File '/azure-functions-host/workers/python/3.8/LINUX/X64/azure_functions_worker/utils/wrappers.py', line 42, in call    raise extend_exception_message(e, message)  File '/azure-functions-host/workers/python/3.8/LINUX/X64/azure_functions_worker/utils/wrappers.py', line 40, in call    return func(*args, **kwargs)  File '/azure-functions-host/workers/python/3.8/LINUX/X64/azure_functions_worker/loader.py', line 85, in load_function    mod = importlib.import_module(fullmodname)  File '/usr/local/lib/python3.8/importlib/__init__.py', line 127, in import_module    return _bootstrap._gcd_import(name[level:], package, level)  File '<frozen importlib._bootstrap>', line 1014, in _gcd_import  File '<frozen importlib._bootstrap>', line 991, in _find_and_load  File '<frozen importlib._bootstrap>', line 975, in _find_and_load_unlocked  File '<frozen importlib._bootstrap>', line 671, in _load_unlocked  File '<frozen importlib._bootstrap_external>', line 843, in exec_module  File '<frozen importlib._bootstrap>', line 219, in _call_with_frames_removed  File '/home/site/wwwroot/SearchEvent/__init__.py', line 14, in <module>    from azure.cosmosdb.table.tableservice import TableService  File '/home/site/wwwroot/.python_packages/lib/site-packages/azure/cosmosdb/table/__init__.py', line 25, in <module>    from azure.cosmosdb.table.tablebatch import TableBatch  File '/home/site/wwwroot/.python_packages/lib/site-packages/azure/cosmosdb/table/tablebatch.py', line 20, in <module>    from azure.cosmosdb.table._request import (  File '/home/site/wwwroot/.python_packages/lib/site-packages/azure/cosmosdb/table/_request.py', line 27, in <module>    from azure.cosmosdb.table._encryption import (  File '/home/site/wwwroot/.python_packages/lib/site-packages/azure/cosmosdb/table/_encryption.py', line 25, in <module>    from cryptography.hazmat.primitives.hashes import (  File '/home/site/wwwroot/.python_packages/lib/site-packages/cryptography/hazmat/primitives/hashes.py', line 9, in <module>    from cryptography.hazmat.bindings._rust import openssl as rust_openssl   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Script.Description.WorkerFunctionInvoker.InvokeCore(Object[] parameters,FunctionInvocationContext context) at /src/azure-functions-host/src/WebJobs.Script/Description/Workers/WorkerFunctionInvoker.cs : 96   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Script.Description.FunctionInvokerBase.Invoke(Object[] parameters) at /src/azure-functions-host/src/WebJobs.Script/Description/FunctionInvokerBase.cs : 82   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.VoidTaskMethodInvoker`2.InvokeAsync[TReflected,TReturnType](TReflected instance,Object[] arguments) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\VoidTaskMethodInvoker.cs : 20   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.FunctionInvoker`2.InvokeAsync[TReflected,TReturnValue](Object instance,Object[] arguments) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionInvoker.cs : 52   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.InvokeWithTimeoutAsync(IFunctionInvoker invoker,ParameterHelper parameterHelper,CancellationTokenSource timeoutTokenSource,CancellationTokenSource functionCancellationTokenSource,Boolean throwOnTimeout,TimeSpan timerInterval,IFunctionInstance instance) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 581   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithWatchersAsync(IFunctionInstanceEx instance,ParameterHelper parameterHelper,ILogger logger,CancellationTokenSource functionCancellationTokenSource) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 527   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithLoggingAsync(IFunctionInstanceEx instance,FunctionStartedMessage message,FunctionInstanceLogEntry instanceLogEntry,ParameterHelper parameterHelper,ILogger logger,CancellationToken cancellationToken) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 306   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Script.Description.WorkerFunctionInvoker.InvokeCore(Object[] parameters,FunctionInvocationContext context) at /src/azure-functions-host/src/WebJobs.Script/Description/Workers/WorkerFunctionInvoker.cs : 96   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Script.Description.FunctionInvokerBase.Invoke(Object[] parameters) at /src/azure-functions-host/src/WebJobs.Script/Description/FunctionInvokerBase.cs : 82   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.VoidTaskMethodInvoker`2.InvokeAsync[TReflected,TReturnType](TReflected instance,Object[] arguments) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\VoidTaskMethodInvoker.cs : 20   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.FunctionInvoker`2.InvokeAsync[TReflected,TReturnValue](Object instance,Object[] arguments) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionInvoker.cs : 52   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.InvokeWithTimeoutAsync(IFunctionInvoker invoker,ParameterHelper parameterHelper,CancellationTokenSource timeoutTokenSource,CancellationTokenSource functionCancellationTokenSource,Boolean throwOnTimeout,TimeSpan timerInterval,IFunctionInstance instance) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 581   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithWatchersAsync(IFunctionInstanceEx instance,ParameterHelper parameterHelper,ILogger logger,CancellationTokenSource functionCancellationTokenSource) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 527   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithLoggingAsync(IFunctionInstanceEx instance,FunctionStartedMessage message,FunctionInstanceLogEntry instanceLogEntry,ParameterHelper parameterHelper,ILogger logger,CancellationToken cancellationToken) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 306   End of inner exception   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.ExecuteWithLoggingAsync(IFunctionInstanceEx instance,FunctionStartedMessage message,FunctionInstanceLogEntry instanceLogEntry,ParameterHelper parameterHelper,ILogger logger,CancellationToken cancellationToken) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 352   at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()   at async Microsoft.Azure.WebJobs.Host.Executors.FunctionExecutor.TryExecuteAsync(IFunctionInstance functionInstance,CancellationToken cancellationToken) at D:\a\_work\1\s\src\Microsoft.Azure.WebJobs.Host\Executors\FunctionExecutor.cs : 108
            
            
            
            ExceptionMessage
            
        Result: Failure

I have modified the runtime version and python version to below to fix the error.

runtime version - 4

Python Version - 3.9

Currently there are no error messages in the function app logs but, I'm not receiving any logs from Sailpoint even though there are audit events generated

/18/2024, 10:20:00 PM
Information
Client-Request-ID=28d40582-a625-11ef-b531-00155d9bdb03 Outgoing request: Method=GET, Path=/checkpointTable(PartitionKey='checkpointTime',RowKey='001'), Query={'$select': None, 'timeout': None}, Headers={'Accept': 'application/json;odata=minimalmetadata', 'DataServiceVersion': '3.0;NetFx', 'MaxDataServiceVersion': '3.0', 'x-ms-version': '2018-03-28', 'User-Agent': 'Azure-Storage/1.4.2-None (Python CPython 3.9.20; Linux 6.1.91.1-microsoft-standard)', 'x-ms-client-request-id': '28d40582-a625-11ef-b531-00155d9bdb03', 'x-ms-date': 'Tue, 19 Nov 2024 03:20:00 GMT', 'Authorization': 'REDACTED'}.
11/18/2024, 10:20:00 PM
Information
Client-Request-ID=28d40582-a625-11ef-b531-00155d9bdb03 Receiving Response: Server-Timestamp=Tue, 19 Nov 2024 03:19:59 GMT, Server-Request-ID=545a1154-9002-0060-2a31-3a847f000000, HTTP Status Code=200, Message=OK, Headers={'cache-control': 'no-cache', 'transfer-encoding': 'chunked', 'content-type': 'application/json;odata=minimalmetadata;streaming=true;charset=utf-8', 'etag': 'W/"datetime\'2024-09-04T04%3A30%3A00.5506966Z\'"', 'server': 'Windows-Azure-Table/1.0 Microsoft-HTTPAPI/2.0', 'x-ms-request-id': '545a1154-9002-0060-2a31-3a847f000000', 'x-ms-version': '2018-03-28', 'x-content-type-options': 'nosniff', 'date': 'Tue, 19 Nov 2024 03:19:59 GMT'}.
11/18/2024, 10:20:00 PM
Information
checkpoint_time 2024\-11\-19T02\:20\:00\.016282Z search_delay_time 2024\-11\-19T02\:20\:00\.336668Z
11/18/2024, 10:20:01 PM
Information
No Events were returned...
11/18/2024, 10:20:01 PM
Information
Executed 'Functions.SearchEvent' (Succeeded, Id=554e8ec5-19b4-486a-b15b-b97e1fc2e086, Duration=1411ms)

1 answer

Givary-MSFT 33,936 Reputation points Microsoft Employee

2024-11-19T04:38:36.21+00:00

@Burra, Rahul Thank you for sharing more details, after reviewing the documentation and could you verify whether the application insights enabled or not? if yes, can you verify connection string value (APPLICATIONINSIGHTS_CONNECTION_STRING) is correctly configured or not.

If the above-mentioned setting is configured correctly, could you please share the screenshot from where you are reviewing/monitoring the function logs (app service logs/file system logs) from logs blade.
Please sign in to rate this answer.
Givary-MSFT 33,936 Reputation points Microsoft Employee

2024-11-20T02:24:42.7+00:00

@Burra, Rahul Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.

Burra, Rahul 0 Reputation points

2024-11-20T19:05:43.2333333+00:00

Hi @Givary-MSFT

The issue still persists. We do have the application insights enabled. There are no error logs in the Application insights. I'm able to make an API call to sharepoint successfully through Postman tool and retrieve the event data but, the same API call is not successful through azure function app. Here is the function app code - https://aka.ms/sentinel-sailpointidentitynow-functionapp I'm using.

Burra, Rahul 0 Reputation points

2024-11-20T19:14:46.43+00:00

Hi @Givary-MSFT

we do have application insights enabled for the function app but, there are no error messages. The function app is able to successfully make an API request but, it's not finding any new logs. I'm able to perform an API request through postman and fetch the logs successfully for the same time duration where azure function app finds nothing. Here is the Python code we are using - https://aka.ms/sentinel-sailpointidentitynow-functionapp Can you please suggest if there is a new version of Python code for SailPoint ?

Givary-MSFT 33,936 Reputation points Microsoft Employee

2024-11-21T08:18:50.2133333+00:00

@Burra, Rahul Would recommend to open a support ticket with our team to investigate this further, as this need detailed investigation with respect to the Azure functions and the code which is being used for this integration.

Also, do share the support ticket details for tracking purpose.

Givary-MSFT 33,936 Reputation points Microsoft Employee

2024-11-21T08:47:04.79+00:00

@Burra, Rahul I see you opened this case # 2411200040012681.

Burra, Rahul 0 Reputation points

2024-11-21T15:59:20.0233333+00:00

Hi @Givary-MSFT

I did raise a request for Microsoft and the case is now open with the Function App team. If you have any other insights on what can be done as part of troubleshooting, please let me know

Regards,

Rahul

Givary-MSFT 33,936 Reputation points Microsoft Employee

2024-12-02T04:19:36.8166667+00:00

@Burra, Rahul In order to help the community members encountering the similar issue,

Posting the comments from the case which helped to resolve this issue.

"Redeployed the FunctionApp with a new Python runtime version, and it seems to have resolved the issue in both non-prod and prod environments

Let me know if you have any further questions, feel free to post back.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

SailPoint Data Connector not working - Microsoft Sentinel

1 answer

Your answer