All Apps and Add-ons

Is there a subscription limitation with Microsoft Azure Metatdata Inventory Add-On?

jscraig2006
Communicator

I noticed that you can only add 1 subscription to the configuration. Will there be the ability to add multiple subscriptions from a single tenant?

0 Karma
1 Solution

jconger
Splunk Employee
Splunk Employee

Yes, you can get data from multiple subscriptions. Here's how:

  1. Grant your Azure AD application registration Reader access to your subscriptions. If you are using the Topology input, you will need to grant Network Contributor access. For more information about required permissions, see this spreadsheet -> http://bit.ly/Splunk_Azure_Permissions
  2. Create a new input in the add-on and supply the tenant ID and subscription ID.

alt text

View solution in original post

jkwiotek
New Member

it would be nice to add multiple subscriptions as a list

0 Karma

jkwiotek
New Member

and how do i get all my 100 subscriptions at a time? do i need to create 100 of those inputs?

0 Karma

jconger
Splunk Employee
Splunk Employee

The API used behind the scenes works at the subscription level, so yeah, you need an input per subscription. However, you don't have to use the UI to create the inputs. You can create inputs via inputs.conf.

0 Karma

jscraig2006
Communicator

I would says yes that you would have to add each subscription to an input with the exception of the inputs not requiring a subscription.

0 Karma

jconger
Splunk Employee
Splunk Employee

Yes, you can get data from multiple subscriptions. Here's how:

  1. Grant your Azure AD application registration Reader access to your subscriptions. If you are using the Topology input, you will need to grant Network Contributor access. For more information about required permissions, see this spreadsheet -> http://bit.ly/Splunk_Azure_Permissions
  2. Create a new input in the add-on and supply the tenant ID and subscription ID.

alt text

jscraig2006
Communicator

sorry for the late response.. This worked great with using the spreadsheet you provided.

0 Karma

jscraig2006
Communicator

Excellent spreadsheet. Just what I needed. We are new to Azure. If I create an AD Application, would this give me the ability to monitor all of our subscriptions and O365?

0 Karma

jkwiotek
New Member

would like to use a wildcard for all my subscriptions

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...

Customer success is front and center at .conf25

Hi Splunkers, If you are not able to be at .conf25 in person, you can still learn about all the latest news ...