All Apps and Add-ons
Highlighted

Splunk Add-on for Microsoft Cloud Services: Can Azure AD Identity Protection Risk events be ingested?

Motivator

Does the Splunk Add-on for Microsoft Cloud Services support ingesting Azure AD Identity Protection Risk events?

Thx

0 Karma
Highlighted

Re: Splunk Add-on for Microsoft Cloud Services: Can Azure AD Identity Protection Risk events be ingested?

Motivator

The Splunk Add-on for Microsoft Cloud Services does not currently integrate with the Azure AD Identity Protection graph API (https://docs.microsoft.com/en-us/azure/active-directory/active-directory-identityprotection-graph-ge... ) You can use the Splunk Add-on builder to interface with this API to pull these events though.

View solution in original post

Highlighted

Re: Splunk Add-on for Microsoft Cloud Services: Can Azure AD Identity Protection Risk events be ingested?

Motivator

Thx for the reply and information

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.