topic Re: Collect AIP data with Splunk Add-On for Microsoft Cloud Services? in All Apps and Add-ons

How to collect Azure Information Protection data with Splunk Add-On for Microsoft Cloud Services?

sjcoluccio67 — Wed, 08 Jul 2020 22:45:26 GMT

Hello,

We want to send Azure Information Protection (AIP) data to Splunk. I have read the Splunk Docs on how to set up the Splunk Add-On for Microsoft Cloud Services to collect data, but it doesn't specify which services within Azure that it can collect data from.

Does anyone know if the add-on can be used to collect from AIP?

Re: Collect AIP data with Splunk Add-On for Microsoft Cloud Services?

deepashri_123 — Thu, 02 Aug 2018 10:34:52 GMT

Hey@sjcoluccio67,

You can refer this blog:
https://www.splunk.com/blog/2016/03/15/splunking-microsoft-azure-data.html
Also you can use this app:
https://splunkbase.splunk.com/app/3040/

Let me know if this helps!!

Re: Collect AIP data with Splunk Add-On for Microsoft Cloud Services?

rkantamaneni_sp — Thu, 25 Apr 2019 08:13:13 GMT

Hi @sjcoluccio67 ,

In case you haven't found this, here's the link to the doc detailing the API Calls that the SA for MSCS is referencing:

https://docs.splunk.com/Documentation/AddOns/released/MSCloudServices/APIs

This doc also links to the MS API definitions.

Re: Collect AIP data with Splunk Add-On for Microsoft Cloud Services?

tony_melendez — Wed, 08 Jul 2020 20:18:59 GMT

I too am I trying to onboard Azure Information Protection (AIP) activity & usage logs into Splunk, but I cannot find any detailed instructions for doing so. None of the responses posted here so far seem to apply to this specific data source. Were you able to find a solution?