Getting Data In

How do you retrieve custom logs from an Azure web app using Splunk Light Cloud?

remusmuresan
New Member

Hi,

I have an Azure website where I have custom logging for user action. The logs are saved in a database. How should I send the logs to the Splunk Light Cloud server? Should I install a forwarder on the web instance? And with a forwarder, how should I get the custom logs?

Thank you.

0 Karma

remeika
Explorer

Rather than push logs to a database, consider using the built-in Diagnostic Logging feature of Azure Websites to ship your application logs to Blob storage. From there you can use the Splunk Add-On for Microsoft Cloud Services to pull logs into splunk.

nagarjuna1207
Engager

I have set up this for Azure web app. And installed the Add-on for Microsoft cloud services. How to confirm whether we are able to access data on azure from Splunk tool (Installed on my local) ? I don't see the data in search though after this setup. Any comments?

0 Karma

nagarjuna1207
Engager

I have re-added the storage account and container name and it has fixed the issue.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...