Developing for Splunk Cloud Services

How to add storage account input having sub-folder path in Azure for Splunk Add-on for Microsoft Cloud Services

jaihingorani
Explorer

Hi i have installed  Splunk Add-on for Microsoft Cloud Services in my heavy forwarder instance, and the app has been working as expected, with 7-8 inputs configured (storage account inputs). Now i am trying to add a new storage account where the container resides in a sub-folder.

My existing inputs folder pattern in Azure(which works fine) :

Storage account -> containers -> <my_container_name>

inputs.conf as below

[mscs_storage_blob://myfirstblob]
account = my_account_name
blob_mode = append
collection_interval = 300
container_name = <my_container_name>
index = index1
sourcetype = mscs:storage:blob:myfirstblob
python.version = python2

I Need help with configure this patter path :

Storage account -> containers -> <my_folder> -> <my_container_name>

i have tried multiple patterns like below but does not seems to be working

inputs.conf

[mscs_storage_blob://myfirstblob]
account = my_account_name
blob_mode = append
collection_interval = 300
container_name = containers/<my_folder>/<my_container_name> (OR this as well /<my_folder>/<my_container_name>)
index = index1
sourcetype = mscs:storage:blob:myfirstblob
python.version = python2

Labels (2)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.