Splunk report to fetch Azure active snapshot details.

[jatin]

Hello experts... I need help... I want to fetch Azure snapshot details... I want active snapshots only... I don't need snapshot details which were deleted.

Can someone share splunk query for the same.

[jconger]

Install the Splunk Add-on for Microsoft Cloud Services and configure the Azure Resource input.  Choose "Snapshot Data" as the resource type (see screenshot).

jconger_0-1708965572357.png

[jatin]

I am new to Splunk so I don't know from where to start.

[ITWhisperer]

Please share some sample (anonymised) events

[jatin]

I am new to Splunk so I don't know from where to start.