Problem

The Splunk integration fails to authenticate with Splunk using token-based authentication after configuration information for the token has been changed (such as the name or audience settings).

Cause

The updated configuration information for the token no longer matches the cached token used by the integration.

Solution

Remove the cached token and restart the Splunk integration to force it to fetch a fresh token from Splunk:

1. Stop the StackState Agent
2. Locate the directory /opt/stackstate-agent/run
3. Rename (or backup and remove) the file called splunk_topologyCheckData.pickle
4. Restart the StackState Agent