Hello @Nawab @dania_abujuma ,
Integrating Azure Web Application Firewall (WAF) logs into Splunk can be achieved using the Splunk Add-on for Microsoft Cloud Services. This add-on allows you to collect activity logs, service status, operational messages, Azure audit logs, and Azure resource data from various Microsoft cloud services, including Azure WAF, using Event Hubs, Azure Service Management APIs, and Azure Storage APIs. It provides the necessary inputs and CIM-compatible knowledge to integrate with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance. Splunkbase+2Splunkbase+2splunk.github.io+2
For more detailed information and installation instructions, you can refer to the official documentation
