topic Re: Can I use Splunk Enterprise Add on as log management tool for Azure Websites (AppService)? in Deployment Architecture

Can I use Splunk Enterprise Add on as log management tool for Azure Websites (AppService)?

Obula — Wed, 14 Feb 2018 15:22:05 GMT

Hello,

I am hosting a website in Azure Platform as a Service(PaaS).

I am using Azure AppService to host my website and a Linux VM hosting MySQL database and connected both.

What I am planning to do is integrate logs (Application, web server, Azure Activity logs, MySQL logs) and monitor them.

Is it possible to achieve this using Splunk enterprise?

Thanks

Re: Can I use Splunk Enterprise Add on as log management tool for Azure Websites (AppService)?

jconger — Wed, 14 Feb 2018 21:25:09 GMT

For this scenario, you can use the Splunk Add-on for Microsoft Cloud Services (a.k.a. MSCS) to pull in the data from the various components listed. Azure Websites expose data via an Azure Blob, and the MSCS add-on can pull in the data written there. For the Linux VMs, you can install a Universal Forwarder, or you can enable diagnostics within Azure and have Splunk pick up the diagnostic data. The MSCS add-on can also pick up the Azure Activity logs (a.k.a. Azure Audit logs).