All Apps and Add-ons
Highlighted

How to collect Azure Information Protection data with Splunk Add-On for Microsoft Cloud Services?

Explorer

Hello,

We want to send Azure Information Protection (AIP) data to Splunk. I have read the Splunk Docs on how to set up the Splunk Add-On for Microsoft Cloud Services to collect data, but it doesn't specify which services within Azure that it can collect data from.

Does anyone know if the add-on can be used to collect from AIP?

Labels (1)
0 Karma
Highlighted

Re: Collect AIP data with Splunk Add-On for Microsoft Cloud Services?

Motivator

Hey@sjcoluccio67,

You can refer this blog:
https://www.splunk.com/blog/2016/03/15/splunking-microsoft-azure-data.html
Also you can use this app:
https://splunkbase.splunk.com/app/3040/

Let me know if this helps!!

0 Karma
Highlighted

Re: Collect AIP data with Splunk Add-On for Microsoft Cloud Services?

Splunk Employee
Splunk Employee

Hi @sjcoluccio67 ,

In case you haven't found this, here's the link to the doc detailing the API Calls that the SA for MSCS is referencing:

https://docs.splunk.com/Documentation/AddOns/released/MSCloudServices/APIs

This doc also links to the MS API definitions.

0 Karma
Highlighted

Re: Collect AIP data with Splunk Add-On for Microsoft Cloud Services?

New Member

I too am I trying to onboard Azure Information Protection (AIP) activity & usage logs into Splunk, but I cannot find any detailed instructions for doing so.  None of the responses posted here so far seem to apply to this specific data source.  Were you able to find a solution?

0 Karma