Whats the best way to get Azure Security center logs to Splunk?

[knalla]

Hello,

Are there any other options to on-board azure security center alerts to Splunk other than eventhub?

[jconger]

Security Center alerts show up in the activity log which can be ingested via event hub or REST API. The Splunk add-on for Microsoft Cloud Services uses the REST API to get the data.