I am a rookie with administrating Splunk. I have been given a virtual Red Hat Linux server in an Azure subscription to install Splunk on as a heavy forwarder. I have downloaded and installed Splunk and configured it to be a HF pointing to our indexer in Splunk Cloud. How do I get logs from Azure's Event Hub to the HF so I can forward what I want to the indexer?
