Splunk Alerting for Azure contents

Alerting

Hello,

I ingested some Azure data into splunk via event hub and would like to ask if you Could you please share some idea/alerts on Azure contents . If you have Azure/Splunk in your env , What are you alerting on based on Azure logs ? Could you share some of the Alerts contents ?

Any help is much appreciated.

Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them. As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...