Can Microsoft OMS Modular Inputs TA be installed on HWF?

[ips_mandar]

Hi,

1. can we install Microsoft OMS Modular Inputs TA on Heavy Weight Forwarder?
2. what are the prerequisites required to install and setup OMS app?
3. Is there any documentation for splunk OMS app?
4. What ports needs to be open to make an connection?
5. In which language OMS query will be written to fetch the data?

@jkat54 - Any insight?

Thanks

[jkat54 · Accepted solution]

All the documentation is on the details page on splunkbase.

This app requires python, so you will need a full splunk install (HF, etc).

The connection to the OMS API occurs over HTTPs (443).

It uses the “legacy” query language.

The app doesn’t work anymore because Microsoft deprecated the API. We’re working on the replacement and expect to have one ready next month.

[ips_mandar]

Thank you @jkat54.
From where I can learn legacy query language as I am not familiar with it?

[jkat54]

See this link:
https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-log-search-transition

[ips_mandar]

Hi @jkat54 ,
any update about latest add-on update because I want to configure OMS add-on...Please help..