topic User Import for Splunk ES Asset & Identity Framework in Splunk Enterprise

User Import for Splunk ES Asset & Identity Framework

splunker2k24 — Fri, 29 Aug 2025 03:01:07 GMT

Hi,

I'm currently looking to gather information for asset & identity framework for Splunk ES. We are using Splunk Cloud. I'd like to get the identity and asset information from Microsoft Azure. I'm aware that there are lot of add-ons available for us to use, but I'm confused which one to choose. Which will help me for my scenario?

Splunk Add-on for Microsoft Azure
Splunk Add-on for Microsoft Office 365
Splunk Add-on for Microsoft Security
Splunk Add-on for Microsoft Cloud Services

Which app should I focus on? Which apps are no longer supported?

I'm thinking of using 'Splunk-add-on-microsoft-azure' app for this because it helps with users, devices, groups information based on the documentation - https://github.com/splunk/splunk-add-on-microsoft-azure/wiki/Create-an-Azure-AD-App-Registration But I see the app (https://splunkbase.splunk.com/app/3757) is not supported. Does anyone use this app? Can we use non supported apps in production?

Thanks!

Re: User Import for Splunk ES Asset & Identity Framework

VatsalJagani — Fri, 29 Aug 2025 11:00:48 GMT

@splunker2k24 - You can use this App.

App not supported meaning that App is not supported by Splunk Support. But App is still valid and developed by "Splunk Works".

And this App is one of the widely used App so you should be good with it.

I hope this helps!!!

Re: User Import for Splunk ES Asset & Identity Framework

splunker2k24 — Fri, 29 Aug 2025 13:32:00 GMT

Can you help me with the first part of question about 'Splunk Add-on for Microsoft Office 365'?