Hi All, For those who are familiar with AWS Cloudtrail logs, these have details about every api call, every event that occurs in your AWS account. Is there an equivalent of the same in Azure that can be ingested in Splunk ?
We have "Splunk Add-on for Microsoft Cloud Services" installed in our environment. What input or config is required to pull in cloudtrail type equivalent logs ?? As of now, we are getting compute logs and Azure AD events via this add-on.
