Azure Firewall

rahul2gupta — Mon, 12 Oct 2020 02:26:56 GMT

I want to check if in our environment splunk receives data/logs into azure firewall. if it doesn't receives is there a way we can ingest data into azure firewall.

Can you please guide us how to check above query?

Regards,

Rahul

Re: Azure Firewall

inventsekar — Mon, 12 Oct 2020 02:50:46 GMT

Hi @rahul2gupta To understand whether you already ingested azure firewall logs to splunk, please check your sourcetypes and see if there are any sourcetypes with azure in them.

To integrate Azure firewall logs to splunk, please check these apps:

https://splunkbase.splunk.com/app/3110/

https://splunkbase.splunk.com/app/3534/

this one is too good, with screenshots:

https://www.splunk.com/en_us/blog/cloud/splunking-microsoft-azure-monitor-data-part-1-azure-setup.html

https://medium.com/@maarten.goet/microsoft-azure-sentinel-not-your-daddys-splunk-3775bda28f39

topic Azure Firewall in Knowledge Management

Azure Firewall

Re: Azure Firewall