Getting Data In

Azure automation script to bring data into splunk

gdavid
Path Finder

i'm trying to centralize all the scripts with version control.

i wanted to run a script scheduled with Azure automation to bring data into splunk.

I was looking at various options to do this and didn't want to write the data to a file, but was looking for something to directly pump the data into splunk.

i noticed that inputs.conf leverages splunk-powershell.exe (i think). 

can i call this from my azure automation script (via hybrid worker on windows) and push the data directly to splunk the same way inputs.conf powershell input does? 

 

Labels (3)
Tags (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

If you already have script which is doing all collection part then better option is use HEC as input. Just configure HEC on your splunk and add to your script part which sends events over http/https to splunk.

https://docs.splunk.com/Documentation/Splunk/8.0.5/Data/UsetheHTTPEventCollector

r. Ismo

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform

 Are you ready to revolutionize your IT operations? As digital transformation accelerates, the demand for ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...

Financial services organizations face an impossible equation: maintain 99.9% uptime for mission-critical ...