All Apps and Add-ons

Is there any plan to pull Azure Security Center logs and alerts from Splunk Add-on for Microsoft Cloud Services?

swong2
Path Finder

Is there any plan or in a roadmap to support pulling Azure Security Center logs/alerts as mentioned in this Microsoft article https://docs.microsoft.com/en-us/azure/security/security-azure-log-integration-overview.

jconger
Splunk Employee
Splunk Employee

These logs should show up in the Audit.General schema, which is supported in the 2.1 version of the MS Cloud Services add-on -> https://splunkbase.splunk.com/app/3110/

smitra_splunk
Splunk Employee
Splunk Employee

is it the mscs:azure:audit sourcetype ?

0 Karma
Get Updates on the Splunk Community!

Federated Search for Amazon S3 | Key Use Cases to Streamline Compliance Workflows

Modern business operations are supported by data compliance. As regulations evolve, organizations must ...

New Dates, New City: Save the Date for .conf25!

Wake up, babe! New .conf25 dates AND location just dropped!! That's right, this year, .conf25 is taking place ...

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud

Introduction to Splunk Observability Cloud - Building a Resilient Hybrid Cloud  In today’s fast-paced digital ...