Developing for Splunk Enterprise

Export Azure application insights logs (Via Custom Events) to Splunk

lovehuria
New Member

I am trying to export Azure application insights (Custom events) via Azure blob storage as a continuous export to Splunk. The add-on for connecting Azure and Splunk is "Splunk Add-on for Microsoft Cloud Services" which allows you to define inputs and pull in data from Azure blob storage. 

So far so good! I am able to fetch the data. The problem with data is that the exported comes in form of a raw JSON dump which is actually not very useful for any sort of visualization in Splunk.

Can anyone suggest a better way of handling this?

Labels (1)
0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!