All Apps and Add-ons
Highlighted

Does anyone actually have Microsoft Azure Monitor working?

SplunkTrust
SplunkTrust

Think you could ping me so we could chat about it? I feel like I've set this up ok but no data... 😕

0 Karma
Highlighted

Re: Does anyone actually have Microsoft Azure Monitor working?

SplunkTrust
SplunkTrust

so...you have to be on version 6.6+ of splunk and you have to be running this from an azure marketplace splunk enterprise version in your azure subscription...you can then send via outputs.conf to your splunk core...

Highlighted

Re: Does anyone actually have Microsoft Azure Monitor working?

Contributor

Hi @marycordovacaa,

Does Splunk 7.0.0 version support this add on because I am not getting any data after doing the configurations?

Thank you!

0 Karma
Highlighted

Re: Does anyone actually have Microsoft Azure Monitor working?

SplunkTrust
SplunkTrust

hey...i guess i should setup some email notifications so i see these sooner...sorry 😞

anyway, do you have this running on the Azure Marketplace Splunk deployment? it only works there

i do actually have a whole new what of doing this that actually works without using any of the various TAs

ill do a write up and post a link to it for you

0 Karma
Highlighted

Re: Does anyone actually have Microsoft Azure Monitor working?

SplunkTrust
SplunkTrust
0 Karma
Highlighted

Re: Does anyone actually have Microsoft Azure Monitor working?

SplunkTrust
SplunkTrust
0 Karma
Highlighted

Re: Does anyone actually have Microsoft Azure Monitor working?

Contributor

I'm not sure either. All the instructions say to get the *.SPL file from the packages folder. There is no file there. It should also install to $SPLUNKHOME/etc/apps/TA-AzureMonitor. But, there is only a way to clone the zip from GIT, so it actually installs to $SPLUNK_HOME$/etc/apps/AzureMonitorAddonForSplunk-master

0 Karma