Appreciate if you could let know which Azure Cloud parameters or metrics have Splunk Cloud monitoring?

[pghuge]

Appreciate if you could let know which Azure Cloud parameters or metrics have Splunk Cloud monitoring?

[marycordova]

here is a post about getting audit logs from Azure and O365: https://answers.splunk.com/answers/678660/how-to-get-logs-from-azure-and-o365-into-splunk.html

many of the individual resources in Azure have to be directly configured to generate audit logs and the solution uses the Log Analytics repositories

also, one of my co-workers whipped up a powershell script the other day to get at some data via the API that I couldn't get in Log Analytics and he just reused my http/HEC listener to post to

i like the reliability and simplicity of this setup much better than some of the other options available

[marycordova]

I believe the configured monitoring is determined by the user (you) within the Azure portal directly, Splunk only receives what you tell Azure to send it.

This is in contrast to the Splunk version of this app in which the app itself determines what data to query the API for. However, Splunk cannot (I've asked several times via Support) tell you precisely what the app is written to retrieve.