Azure WAF integration with splunk

[Nawab]

Is there anyone who have integrated Azure WAF with splunk.

If yes let me know which app or add-on you used.

[Meett]

Hello @Nawab @dania_abujuma ,

Integrating Azure Web Application Firewall (WAF) logs into Splunk can be achieved using the Splunk Add-on for Microsoft Cloud Services. This add-on allows you to collect activity logs, service status, operational messages, Azure audit logs, and Azure resource data from various Microsoft cloud services, including Azure WAF, using Event Hubs, Azure Service Management APIs, and Azure Storage APIs. It provides the necessary inputs and CIM-compatible knowledge to integrate with other Splunk apps, such as Splunk Enterprise Security and the Splunk App for PCI Compliance. Splunkbase+2Splunkbase+2splunk.github.io+2

For more detailed information and installation instructions, you can refer to the official documentation 

[dania_abujuma]

Hello @Nawab ,

Did you find an answer?