Getting Data In

Get data from Azure Function into Splunk Enterprise

jeffbat
Path Finder

I am trying to be able to get data in from an azure function one our of team's has done.

We are not able to get the data in through our HEC endpoints as all of those are internal to our network and the azure function sits outside of our network.  So we have gone the route of trying to have the function send into an EventHub  in Azure and then we pull the data from there.

using the Microsoft Azure Add-on for Splunk:

https://splunkbase.splunk.com/app/3757/ 

 

But it only seems to like the standard Azure diagnostic type logged data (admin/metrics).  But not any custom error logging we are sending into that EventHub.

I am not seeing any errors for the app saying it can't connect or anything but no luck getting the custom erro logs.

 

What is the best way to get an applications custom error logs out of an Azure EventHub?

Labels (2)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

This Week's Community Digest - Splunk Community Happenings [9.26.22]

Get the latest news and updates from the Splunk Community here! Upcoming User Group Events! 👏 Check ...

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: https://bsidessplunk.com CFP Site: https://bsidessplunk.com/cfp CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...