Getting Data In

How do you retrieve custom logs from an Azure web app using Splunk Light Cloud?

remusmuresan
New Member

Hi,

I have an Azure website where I have custom logging for user action. The logs are saved in a database. How should I send the logs to the Splunk Light Cloud server? Should I install a forwarder on the web instance? And with a forwarder, how should I get the custom logs?

Thank you.

0 Karma

remeika
Explorer

Rather than push logs to a database, consider using the built-in Diagnostic Logging feature of Azure Websites to ship your application logs to Blob storage. From there you can use the Splunk Add-On for Microsoft Cloud Services to pull logs into splunk.

nagarjuna1207
Engager

I have set up this for Azure web app. And installed the Add-on for Microsoft cloud services. How to confirm whether we are able to access data on azure from Splunk tool (Installed on my local) ? I don't see the data in search though after this setup. Any comments?

0 Karma

nagarjuna1207
Engager

I have re-added the storage account and container name and it has fixed the issue.

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...