All Apps and Add-ons

Error when ingesting Azure Activity Log: No connection on hub: insights-operational-logs.

ejwade
Contributor

After configuring Azure Monitor Add-On in Splunk and Azure, I receive the following error from splunkd:

ERROR ExecProcessor - message from "/opt/splunk/etc/apps/TA-Azure_Monitor/bin/azure_activity_log.sh" Modular input azure_activity_log:// No connection on hub: insights-operational-logs. Is there a network route to the endpoint?

I am using Splunk's proxy variable to send traffic through our Squid proxy. Is this compatible with the add-on?

Nothing is getting denied in the proxy - I'm allowing access to login.microsoftonline.com and .vault.azure.net. Python and Nodejs dependencies have been installed as well.

0 Karma
1 Solution

jconger
Splunk Employee
Splunk Employee

This add-on does not support a proxy server directly. The add-on uses AMQP to connect to the Azure event hubs for activity data and diagnostic logs, so setting the HTTP proxy in server.conf doesn't help. Some people have either run the add-on inside of Azure via a heavy forwarder on an Azure VM, or have a heavy forwarder that doesn't need a proxy for an outbound connection.

View solution in original post

jconger
Splunk Employee
Splunk Employee

This add-on does not support a proxy server directly. The add-on uses AMQP to connect to the Azure event hubs for activity data and diagnostic logs, so setting the HTTP proxy in server.conf doesn't help. Some people have either run the add-on inside of Azure via a heavy forwarder on an Azure VM, or have a heavy forwarder that doesn't need a proxy for an outbound connection.

ejwade
Contributor

Thank you, jconger. I'll give it a try without the proxy and report back.

0 Karma

ejwade
Contributor

That was it! Thank you, jconger!

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...