All Apps and Add-ons

Do you need a forwarding server for the add-on for Microsoft Cloud Services?

russmoore6
New Member

I have a Splunk instances in SplunkCloud. I setup the Add-on for Microsoft Cloud Services and followed the instructions to a T. No information is flowing in. Does this add on need a forwarding server? All the information I'm finding sounds like one needs to be set up.

If this is the case, are there any plans for direct connection to Azure Cloud?

0 Karma

rpille_splunk
Splunk Employee
Splunk Employee

Yes, http://docs.splunk.com/Documentation/AddOns/released/MSCloudServices/Install says that this add-on requires a heavy forwarder for data collection.

Connect that heavy forwarder to your Splunk Cloud environment by installing the Splunk Universal Forwarder Credentials package on it. Despite the name of the package, it is needed for forwarders of any type that need to send data to Splunk Cloud.

Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...