[cloud::microsoft::office365::teams::plugin] --mode=users-activity: UNKNOWN: Cannot parse csv response

[tpeslerbe]

Dear all,

It appears that the Microsoft Office 365 Teams plugin (mode-users-activity) suddenly doesn't work on a customer tenant of my company since now few hours:

centreon_plugins.pl --plugin=cloud::microsoft::office365::teams::plugin --mode=users-activity --custommode='graphapi' --tenant='XXX' --client-id='XXX' --client-secret='XXX' UNKNOWN: Cannot parse csv response: EHR - getline_hr () called before column_names () at /var/lib/centreon/plugins/cloud/microsoft/office365/custom/graphapi.pm line 254.

https://docs.microsoft.com/en-us/graph/teams-concept-overview
https://docs.microsoft.com/en-us/graph/api/reportroot-getteamsuseractivityuserdetail?view=graph-rest-1.0

Thank you in advance for any help/advice

Kind Regards,
Thomas

[garnier-quentin]

Could you provide response with --debug-stream option ?

[tpeslerbe]

`centreon_plugins.pl --plugin=cloud::microsoft::office365::teams::plugin --mode=users-activity --custommode='graphapi' --tenant='XXX' --client-id='XXX' --client-secret='XXX' --debug
UNKNOWN: Cannot parse csv response: EHR - getline_hr () called before column_names () at /var/lib/centreon/plugins/cloud/microsoft/office365/custom/graphapi.pm line 254.
======> request send
GET https://graph.microsoft.com/v1.0/reports/getTeamsUserActivityUserDetail(period='D7')
Accept: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJub25jZSI6IkJDMnRmUWwxQ0ktc2RwT0NUM3BSaGJqZTQzX3YzbHl1cUYzaXZ3emVoM2siLCJhbGciOiJSUzI1NiIsIng1dCI6ImpTMVhvMU9XRGpfNTJ2YndHTmd2UU8yVnpNYyIsImtpZCI6ImpTMVhvMU9XRGpfNTJ2YndHTmd2UU8yVnpNYyJ9.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.AVhNfzuALCzvrl_ad1WSeQ-2QBIozFmdjyh5h1B3WNnfeEiP46Pfh5x2PReElBTOa6zO6UfWKBqV17alG0jPKYGg_vlJqc9MCQ6ewjiIimrZkLQrJ9z6XmKR592U9_p-Ysbqn4Xkrw0t7HMBMJWx_IqidjpF5QpE30BQydwwdOEj1KSQreFfCobBnV6ku2Q9mhHjAK6g9BkzI_ap_wlhn5M0UMhL_LYfXjwqaBSoLWDTtsbYXmxmMPY5GBex8IY9AQOPZ6TyczLMTEu6onngiFmwqbBa8xzTOIUS-BiBxszjECJSZvjXFFUUV9lzl7P-dhZCNNjTRT-k5VtH7D0uYQ
User-Agent: centreon::plugins::backend::http::useragent
Content-Type: application/x-www-form-urlencoded

======> response done
HTTP/1.1 302 Found
Cache-Control: no-store, no-cache, max-age=0, s-maxage=0, private
Date: Wed, 20 Apr 2022 12:59:50 GMT
Location: https://reportsweu.office.com/data/v1.0/download?token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjU4N0I5RTRBMTQwM0JFOTlEQjdFMjIxMDAxRDIyMDM4MENGRjA3MzEiLCJ0eXAiOiJKV1QifQ.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.RudrA9pDhFhnoT5rXzoYTzKE7U5qRuDNBbs3eXiKyo1cRLXYTnqDKCWp0Hj-rUO7GZ010zXZOZzjL1e1HB4LK8eSFlfW8ByUoQN2b93lNc2qdYvTW1KoErhP9BG3WGSxsn1g9-yM8UAo54uRrs8qCOELWZVxLxhn3wp418vI-XYaiH5XLMin9KnH00AkiAsBOPlUZQXi5MLHb1NdrczTynLMudlnjXysFh8IUX3hz3fN-KteqmsL9RCUpywMJB30TUrQ9YFV5rW0c0UYAdo1s_2jTz1tijP9YxztyJqERMpx0uAN0EQBQIvGIfeaK-xDMdC9zVLux0lqbxXm-lHSGg
Content-Length: 0
Client-Date: Wed, 20 Apr 2022 12:59:51 GMT
Client-Peer: XXX
Client-Request-Id: 919dc40b-2a32-422b-aedf-501cb982f3aa
Client-Response-Num: 1
Client-SSL-Cert-Issuer: /C=US/O=Microsoft Corporation/CN=Microsoft Azure TLS Issuing CA 05
Client-SSL-Cert-Subject: /C=US/ST=WA/L=Redmond/O=Microsoft Corporation/CN=graph.microsoft.com
Client-SSL-Cipher: ECDHE-RSA-AES128-GCM-SHA256
Client-SSL-Socket-Class: IO::Socket::SSL
Request-Id: 919dc40b-2a32-422b-aedf-501cb982f3aa
Strict-Transport-Security: max-age=31536000
X-Ms-Ags-Diagnostic: {"ServerInfo":{"DataCenter":"France Central","Slice":"E","Ring":"5","ScaleUnit":"001","RoleInstance":"PA2PEPF00002696"}}

======> request send
GET https://reportsweu.office.com/data/v1.0/download?token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjU4N0I5RTRBMTQwM0JFOTlEQjdFMjIxMDAxRDIyMDM4MENGRjA3MzEiLCJ0eXAiOiJKV1QifQ.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.RudrA9pDhFhnoT5rXzoYTzKE7U5qRuDNBbs3eXiKyo1cRLXYTnqDKCWp0Hj-rUO7GZ010zXZOZzjL1e1HB4LK8eSFlfW8ByUoQN2b93lNc2qdYvTW1KoErhP9BG3WGSxsn1g9-yM8UAo54uRrs8qCOELWZVxLxhn3wp418vI-XYaiH5XLMin9KnH00AkiAsBOPlUZQXi5MLHb1NdrczTynLMudlnjXysFh8IUX3hz3fN-KteqmsL9RCUpywMJB30TUrQ9YFV5rW0c0UYAdo1s_2jTz1tijP9YxztyJqERMpx0uAN0EQBQIvGIfeaK-xDMdC9zVLux0lqbxXm-lHSGg
Accept: application/json
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJub25jZSI6IkJDMnRmUWwxQ0ktc2RwT0NUM3BSaGJqZTQzX3YzbHl1cUYzaXZ3emVoM2siLCJhbGciOiJSUzI1NiIsIng1dCI6ImpTMVhvMU9XRGpfNTJ2YndHTmd2UU8yVnpNYyIsImtpZCI6ImpTMVhvMU9XRGpfNTJ2YndHTmd2UU8yVnpNYyJ9.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.AVhNfzuALCzvrl_ad1WSeQ-2QBIozFmdjyh5h1B3WNnfeEiP46Pfh5x2PReElBTOa6zO6UfWKBqV17alG0jPKYGg_vlJqc9MCQ6ewjiIimrZkLQrJ9z6XmKR592U9_p-Ysbqn4Xkrw0t7HMBMJWx_IqidjpF5QpE30BQydwwdOEj1KSQreFfCobBnV6ku2Q9mhHjAK6g9BkzI_ap_wlhn5M0UMhL_LYfXjwqaBSoLWDTtsbYXmxmMPY5GBex8IY9AQOPZ6TyczLMTEu6onngiFmwqbBa8xzTOIUS-BiBxszjECJSZvjXFFUUV9lzl7P-dhZCNNjTRT-k5VtH7D0uYQ
User-Agent: centreon::plugins::backend::http::useragent
Content-Type: application/x-www-form-urlencoded

======> response done
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, max-age=0, s-maxage=0, private
Date: Wed, 20 Apr 2022 12:59:50 GMT
Pragma: no-cache
ETag: "NC8xOC8yMDIyIDEyOjAwOjAwIEFNICswMDowMA=="
Server: Microsoft-IIS/10.0
Content-Type: application/octet-stream
Client-Aborted: die
Client-Date: Wed, 20 Apr 2022 12:59:51 GMT
Client-Peer: XXX
Client-Response-Num: 1
Client-SSL-Cert-Issuer: /C=US/O=DigiCert Inc/CN=DigiCert Cloud Services CA-1
Client-SSL-Cert-Subject: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=reports.office.com
Client-SSL-Cipher: ECDHE-RSA-AES256-GCM-SHA384
Client-SSL-Socket-Class: IO::Socket::SSL
Client-Transfer-Encoding: chunked
Content-Disposition: attachment; filename="TeamsUserActivityUserDetail4/20/2022 12:59:51 PM.csv"
Content-Security-Policy: frame-options
RequestId: 19AF16EC0C344E72816EF93F3DB19925
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Content-Type-Options: nosniff
X-Died: Entity body read failed: Connection reset by peer at /usr/share/perl5/vendor_perl/Net/HTTP/Methods.pm line 265.
X-Frame-Options: Deny
X-Powered-By: ASP.NET
X-XSS-Protection: 1; mode=block`

[garnier-quentin]

Could you try to use --http-backend=curl ?

[tpeslerbe]

`centreon_plugins.pl --plugin=cloud::microsoft::office365::teams::plugin --mode=users-activity --custommode='graphapi' --tenant='XXX' --client-id='XXX' --client-secret='XXX' --http-backend=curl --debug
UNKNOWN: curl perform error :
== Info: About to connect() to graph.microsoft.com port 443 (#0)
== Info: Trying 20.190.177.88...
== Info: Connected to graph.microsoft.com (20.190.177.88) port 443 (#0)
== Info: Initializing NSS with certpath: sql:/etc/pki/nssdb
== Info: CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
== Info: SSL connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
== Info: Server certificate:
== Info: subject: CN=graph.microsoft.com,O=Microsoft Corporation,L=Redmond,ST=WA,C=US
== Info: start date: Apr 12 18:42:22 2022 GMT
== Info: expire date: Apr 07 18:42:22 2023 GMT
== Info: common name: graph.microsoft.com
== Info: issuer: CN=Microsoft Azure TLS Issuing CA 05,O=Microsoft Corporation,C=US
=> Send header: GET /v1.0/reports/getTeamsUserActivityUserDetail(period='D7') HTTP/1.1
Host: graph.microsoft.com
Accept:application/json
Content-Type:application/x-www-form-urlencoded
Authorization:Bearer eyJ0eXAiOiJKV1QiLCJub25jZSI6InpUdy1HdWhTbkp1dl9yYUk3VEtweFMtQy1ZZkt1VmZTNlp1d3IzbHlJVlUiLCJhbGciOiJSUzI1NiIsIng1dCI6ImpTMVhvMU9XRGpfNTJ2YndHTmd2UU8yVnpNYyIsImtpZCI6ImpTMVhvMU9XRGpfNTJ2YndHTmd2UU8yVnpNYyJ9.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.AXSy1uLfgO-tDMkW5xwrPhcQwGxiNRednsWKG9WP1n4CYuyrLpR56LHx3_TQWWWTkisNBnP_w_o0WZTE8rCrH3imewMpO_dD8MOOfgHBX8iUgz-94JYUZmFkrdM1XBsSdOWfbjXgn9b-noeVjz8IvXD5OgfY2gDbsso3VKEB8vLsYo5iDVRcoammdMeDebg8P3JnzoTV7njLOGtv8dJ8H9NIOeAnJ7ykPyNXyMxOiqoTXSYbU7KEgBDFFuRo3733HtDNfbF6i5OWKGb-MOuDUwd-STRbsYgR8OAS8Qmm_Mp8HnBN5L131JVa0hmptPq0iJ5ENk_rHnDvsegYoH2N3Q

=> Recv header: HTTP/1.1 302 Found
=> Recv header: Cache-Control: no-store, no-cache, max-age=0, s-maxage=0, private
=> Recv header: Location: https://reportsweu.office.com/data/v1.0/download?token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjU4N0I5RTRBMTQwM0JFOTlEQjdFMjIxMDAxRDIyMDM4MENGRjA3MzEiLCJ0eXAiOiJKV1QifQ.eyJ0aWQiOiJjYzg1ZDM5NS00NWNlLTQ4N2EtYmEzZC01ZTIxZGU1YWU2NjQiLCJlbnQiOiJnZXRUZWFtc1VzZXJBY3Rpdml0eVVzZXJEZXRhaWwiLCJhcHAiOiJhOWY0Mjg2NS1jOTU2LTQxMTctODFhNy02MzhjNWJiZWMwNGQiLCJjaWQiOiIxRDZEODA4QTZDMzQ0NEI3QUMzREJGQUQ1MURDRjA1QSIsImd2ZXIiOiJWMSIsImFnZyI6Ik03IiwiZGF0ZSI6IiIsInR2ZXIiOiJWMS4wIiwicmVxIjoicmVwb3J0c3dldS5vZmZpY2UuY29tIiwicG9yIjoiNDQzIiwibmJmIjoxNjUwNDYxMTE2LCJleHAiOjE2NTA0NjEyMzYsImlhdCI6MTY1MDQ2MTExNiwiaXNzIjoiNTA3YmM5ZGEtYzRlMi00MGNiLTk2YTctYWM5MGRmOTI2ODVjIiwiYXVkIjoicmVwb3J0c3dldS5vZmZpY2UuY29tIn0.lzj0SLrdyEme5F5ljqsVcTMZN7dGNnmjDbOgcdCIcTC1B8vtf_-f4YjxWAGedU5FErMNcgK3mvZ4vHRjlkx_fkk7ToTJ15ZGuLYxIRUlfWMUzDPFLxYSWfgoxJHos4yshLu1rC2HsmZLSNFIsED_1gGRwxVHB9ryt7X-5tv9nV_tWbL1xt9E0B_bbglA8V_SwZt5h99l3IPICqzZV9IipXDTF6jZyJISqYz1AOLJF2-rYCdzeI1hjVmB7S62tsBC1tQEjNkaaSFXT6vmAsI8euz-kboHGrzG72ViaBNFFi8hUumty7mGxwdB586iPgY7HBw8jwp_BpgCwpvM6PS9HQ
=> Recv header: Strict-Transport-Security: max-age=31536000
=> Recv header: request-id: a3635e01-d07a-4fcb-8dbb-f86d755f6f9c
=> Recv header: client-request-id: a3635e01-d07a-4fcb-8dbb-f86d755f6f9c
=> Recv header: x-ms-ags-diagnostic: {"ServerInfo":{"DataCenter":"France Central","Slice":"E","Ring":"5","ScaleUnit":"002","RoleInstance":"PA3PEPF000002C9"}}
=> Recv header: Date: Wed, 20 Apr 2022 13:25:16 GMT
=> Recv header: Content-Length: 0
=> Recv header:
== Info: Connection #0 to host graph.microsoft.com left intact
== Info: Issue another request to this URL: 'https://reportsweu.office.com/data/v1.0/download?token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjU4N0I5RTRBMTQwM0JFOTlEQjdFMjIxMDAxRDIyMDM4MENGRjA3MzEiLCJ0eXAiOiJKV1QifQ.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.lzj0SLrdyEme5F5ljqsVcTMZN7dGNnmjDbOgcdCIcTC1B8vtf_-f4YjxWAGedU5FErMNcgK3mvZ4vHRjlkx_fkk7ToTJ15ZGuLYxIRUlfWMUzDPFLxYSWfgoxJHos4yshLu1rC2HsmZLSNFIsED_1gGRwxVHB9ryt7X-5tv9nV_tWbL1xt9E0B_bbglA8V_SwZt5h99l3IPICqzZV9IipXDTF6jZyJISqYz1AOLJF2-rYCdzeI1hjVmB7S62tsBC1tQEjNkaaSFXT6vmAsI8euz-kboHGrzG72ViaBNFFi8hUumty7mGxwdB586iPgY7HBw8jwp_BpgCwpvM6PS9HQ'
== Info: About to connect() to reportsweu.office.com port 443 (#1)
== Info: Trying 13.69.251.46...
== Info: Connected to reportsweu.office.com (13.69.251.46) port 443 (#1)
== Info: CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
== Info: SSL connection using TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
== Info: Server certificate:
== Info: subject: CN=reports.office.com,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
== Info: start date: Nov 16 00:00:00 2021 GMT
== Info: expire date: Nov 15 23:59:59 2022 GMT
== Info: common name: reports.office.com
== Info: issuer: CN=DigiCert Cloud Services CA-1,O=DigiCert Inc,C=US
=> Send header: GET /data/v1.0/download?token=eyJhbGciOiJSUzI1NiIsImtpZCI6IjU4N0I5RTRBMTQwM0JFOTlEQjdFMjIxMDAxRDIyMDM4MENGRjA3MzEiLCJ0eXAiOiJKV1QifQ.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.lzj0SLrdyEme5F5ljqsVcTMZN7dGNnmjDbOgcdCIcTC1B8vtf_-f4YjxWAGedU5FErMNcgK3mvZ4vHRjlkx_fkk7ToTJ15ZGuLYxIRUlfWMUzDPFLxYSWfgoxJHos4yshLu1rC2HsmZLSNFIsED_1gGRwxVHB9ryt7X-5tv9nV_tWbL1xt9E0B_bbglA8V_SwZt5h99l3IPICqzZV9IipXDTF6jZyJISqYz1AOLJF2-rYCdzeI1hjVmB7S62tsBC1tQEjNkaaSFXT6vmAsI8euz-kboHGrzG72ViaBNFFi8hUumty7mGxwdB586iPgY7HBw8jwp_BpgCwpvM6PS9HQ HTTP/1.1
Host: reportsweu.office.com
Accept:application/json
Content-Type:application/x-www-form-urlencoded

=> Recv header: HTTP/1.1 200 OK
=> Recv header: Cache-Control: no-store, no-cache, max-age=0, s-maxage=0, private
=> Recv header: Pragma: no-cache
=> Recv header: Transfer-Encoding: chunked
=> Recv header: Content-Type: application/octet-stream
=> Recv header: ETag: "NC8xOC8yMDIyIDEyOjAwOjAwIEFNICswMDowMA=="
=> Recv header: Server: Microsoft-IIS/10.0
=> Recv header: X-XSS-Protection: 1; mode=block
=> Recv header: X-Content-Type-Options: nosniff
=> Recv header: Strict-Transport-Security: max-age=31536000; includeSubDomains
=> Recv header: X-Frame-Options: Deny
=> Recv header: Content-Security-Policy: frame-options
=> Recv header: requestId: 2D5E30F751D44B7CBFF2F2A0961FE74D
=> Recv header: Content-Disposition: attachment; filename="TeamsUserActivityUserDetail4/20/2022 1:25:16 PM.csv"
=> Recv header: X-Powered-By: ASP.NET
=> Recv header: Date: Wed, 20 Apr 2022 13:25:16 GMT
=> Recv header:
=> Recv data: 3

== Info: SSL read: errno -5961 (PR_CONNECT_RESET_ERROR)
== Info: TCP connection reset by peer
== Info: Closing connection 1`

[garnier-quentin]

I have already see that kind of error. You can try to reproduce it with curl command. You should have the same error:

SSL read: errno -5961 (PR_CONNECT_RESET_ERROR)