<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Getting logs out of Azure in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/Getting-logs-out-of-Azure/m-p/448696#M77984</link>
    <description>&lt;P&gt;I am a rookie with administrating Splunk.  I have been given a virtual Red Hat Linux server in an Azure subscription to install Splunk on as a heavy forwarder.  I have downloaded and installed Splunk and configured it to be a HF pointing to our indexer in Splunk Cloud.  How do I get logs from Azure's Event Hub to the HF so I can forward what I want to the indexer?&lt;/P&gt;</description>
    <pubDate>Tue, 07 May 2019 21:12:00 GMT</pubDate>
    <dc:creator>herbertschley</dc:creator>
    <dc:date>2019-05-07T21:12:00Z</dc:date>
    <item>
      <title>Getting logs out of Azure</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/Getting-logs-out-of-Azure/m-p/448696#M77984</link>
      <description>&lt;P&gt;I am a rookie with administrating Splunk.  I have been given a virtual Red Hat Linux server in an Azure subscription to install Splunk on as a heavy forwarder.  I have downloaded and installed Splunk and configured it to be a HF pointing to our indexer in Splunk Cloud.  How do I get logs from Azure's Event Hub to the HF so I can forward what I want to the indexer?&lt;/P&gt;</description>
      <pubDate>Tue, 07 May 2019 21:12:00 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/Getting-logs-out-of-Azure/m-p/448696#M77984</guid>
      <dc:creator>herbertschley</dc:creator>
      <dc:date>2019-05-07T21:12:00Z</dc:date>
    </item>
  </channel>
</rss>

