<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic We have planing to add azure application logs(Audit  cloud logs) to splunk  environment . in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/We-have-planing-to-add-azure-application-logs-Audit-cloud-logs/m-p/423489#M174253</link>
    <description>&lt;P&gt;in our environment we have 4 servers (A,B,C D)&lt;/P&gt;

&lt;P&gt;A &amp;gt;&amp;gt;Act as a(indexer ,search head ,license master ,Forwarder management )&lt;BR /&gt;
B&amp;gt;&amp;gt;Indexer&lt;BR /&gt;
C&amp;gt;&amp;gt;Indexer&lt;BR /&gt;
D&amp;gt;&amp;gt;Indexer&lt;/P&gt;

&lt;P&gt;we have follow this document for Splunk integration.&lt;BR /&gt;
&lt;A href="https://www.splunk.com/blog/2018/05/07/splunking-microsoft-azure-monitor-data-part-2-splunk-setup.html"&gt;https://www.splunk.com/blog/2018/05/07/splunking-microsoft-azure-monitor-data-part-2-splunk-setup.html&lt;/A&gt;&lt;BR /&gt;
we need to run some script that script will update in Phyton in OS it will impact current running environment?&lt;BR /&gt;
Please any one advice &amp;amp; suggest azure application logs integration options&lt;/P&gt;</description>
    <pubDate>Wed, 05 Dec 2018 09:56:35 GMT</pubDate>
    <dc:creator>satkan100</dc:creator>
    <dc:date>2018-12-05T09:56:35Z</dc:date>
    <item>
      <title>We have planing to add azure application logs(Audit  cloud logs) to splunk  environment .</title>
      <link>https://community.splunk.com/t5/Splunk-Search/We-have-planing-to-add-azure-application-logs-Audit-cloud-logs/m-p/423489#M174253</link>
      <description>&lt;P&gt;in our environment we have 4 servers (A,B,C D)&lt;/P&gt;

&lt;P&gt;A &amp;gt;&amp;gt;Act as a(indexer ,search head ,license master ,Forwarder management )&lt;BR /&gt;
B&amp;gt;&amp;gt;Indexer&lt;BR /&gt;
C&amp;gt;&amp;gt;Indexer&lt;BR /&gt;
D&amp;gt;&amp;gt;Indexer&lt;/P&gt;

&lt;P&gt;we have follow this document for Splunk integration.&lt;BR /&gt;
&lt;A href="https://www.splunk.com/blog/2018/05/07/splunking-microsoft-azure-monitor-data-part-2-splunk-setup.html"&gt;https://www.splunk.com/blog/2018/05/07/splunking-microsoft-azure-monitor-data-part-2-splunk-setup.html&lt;/A&gt;&lt;BR /&gt;
we need to run some script that script will update in Phyton in OS it will impact current running environment?&lt;BR /&gt;
Please any one advice &amp;amp; suggest azure application logs integration options&lt;/P&gt;</description>
      <pubDate>Wed, 05 Dec 2018 09:56:35 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/We-have-planing-to-add-azure-application-logs-Audit-cloud-logs/m-p/423489#M174253</guid>
      <dc:creator>satkan100</dc:creator>
      <dc:date>2018-12-05T09:56:35Z</dc:date>
    </item>
    <item>
      <title>Re: We have planing to add azure application logs(Audit  cloud logs) to splunk  environment .</title>
      <link>https://community.splunk.com/t5/Splunk-Search/We-have-planing-to-add-azure-application-logs-Audit-cloud-logs/m-p/423490#M174254</link>
      <description>&lt;P&gt;The script does not update the Python version in the OS; instead, the script downloads the Python dependencies needed by the add-on and moves those dependencies to the add-on's bin folder.  This add-on was written by Microsoft and Microsoft will not redistribute any 3rd party software (in this case, the Python and Node.js dependencies).  So, you have to download those dependencies manually (or via script) and move them to the correct place in the add-on.&lt;/P&gt;</description>
      <pubDate>Wed, 19 Dec 2018 18:34:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/We-have-planing-to-add-azure-application-logs-Audit-cloud-logs/m-p/423490#M174254</guid>
      <dc:creator>jconger</dc:creator>
      <dc:date>2018-12-19T18:34:08Z</dc:date>
    </item>
  </channel>
</rss>

