Getting Data In

Azure Event Hub Integrator logs to Splunk - no logs coming in

njytrde
Explorer

Hello,

Has anyone successfully ingested logs from Microsoft Azure, specifically through the Event Hub Integrator add-on that is not supported by Splunk cloud?

This is the add-on that I am referring to on splunkbase:
https://splunkbase.splunk.com/app/4343/#/details

I supplied information from the Azure portal and even edits on the props.conf stanza suggested on the Details part of the splunkbase.
No logs coming at all, so no error messages to go on. I find it extremely difficult to believe that we are the only customer trying to ingest these logs from this app. Please help!

Tags (2)
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...