All Apps and Add-ons

How to collect Azure Information Protection data with Splunk Add-On for Microsoft Cloud Services?



We want to send Azure Information Protection (AIP) data to Splunk. I have read the Splunk Docs on how to set up the Splunk Add-On for Microsoft Cloud Services to collect data, but it doesn't specify which services within Azure that it can collect data from.

Does anyone know if the add-on can be used to collect from AIP?

Labels (1)
0 Karma

New Member

I too am I trying to onboard Azure Information Protection (AIP) activity & usage logs into Splunk, but I cannot find any detailed instructions for doing so.  None of the responses posted here so far seem to apply to this specific data source.  Were you able to find a solution?

0 Karma

Splunk Employee
Splunk Employee

Hi @sjcoluccio67 ,

In case you haven't found this, here's the link to the doc detailing the API Calls that the SA for MSCS is referencing:

This doc also links to the MS API definitions.

0 Karma



You can refer this blog:
Also you can use this app:

Let me know if this helps!!

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!