Solved: How to retrieve logs from Azure Active Directory?

Julieda · ‎11-10-2015

Hi!

I want to connect with Azure Active Directory and get its logs into Splunk. What is the procedure of doing this? Can a Splunk forwarder be installed in Azure (and how should it be done)? Or should Azure AD send log data to an external forwarder?

Any help would be appreciated.

greich · ‎06-10-2016

http://docs.splunk.com/Documentation/AddOns/released/MSCloudServices/About
and in particular http://docs.splunk.com/Documentation/AddOns/latest/MSCloudServices/Hardwareandsoftwarerequirements
should answer your question.

View solution in original post

greich · ‎06-10-2016

http://docs.splunk.com/Documentation/AddOns/released/MSCloudServices/About
and in particular http://docs.splunk.com/Documentation/AddOns/latest/MSCloudServices/Hardwareandsoftwarerequirements
should answer your question.

How to retrieve logs from Azure Active Directory?

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation