Getting Data In

TA-MS-AAD - Daily billing data

giorgiovolpini
New Member

Hi all,

I'm trying understending how TA-MS-AAD add-on works.

I configured a data input to collect data about billing and Consumption setting interval to 600 and Max days to query 4 on my local instance.
I'm receiveng data about billing (sourcetype="azure:billing"); data are about every istances and I'receiving daily costs.

However for some days I'm not receiving data (ex: I have data for 2020-02-02 - 2020-02-03 - 2020-02-05 but not for 2020-02-04).

alt text

Is it normal? Does anyone know a guide to configure data input correctly?

Thank you

Giorgio

Tags (2)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...