I am planning on integrating o365 and Azure cloud services to my Splunk on-prem environment.
Now there are several Add-Ons to choose from in Splunkase
What is the main difference between these Add-Ons and which should i use? The documentation did not really help.
"The Splunk Add-on for Microsoft Office 365 replaces the modular input for the Office 365 Management API within the Splunk Add-on for Microsoft Cloud Services."
Thank you for the quick feedback, the guide is helpful but i was more looking into a comparison about what add-on to use.
Is the "Splunk Add-on for Microsoft Cloud Services" able to get the O365 data? Is it advised to use it?
we have used this instructions