Getting Data In

coldToFrozen Azure blob storage account

morphis72
Path Finder

I have a distributed Splunk environment running in Azure IaaS. I need to start rolling my cold data off to archive and it looks like our best option is going to be blob storage. I have found plenty of information on how to do this if it was AWS and S3 however, Microsoft Azure's blob doesn't support S3.

I have found a tool called AZcopy that looks like it might be part of the puzzle?

Is anyone currently doing this and if so do you have a script you could sanitize and let me look at to get a starting point?

0 Karma

hernanrodriguez
Explorer

Hi @morphis72 

Also I have Splunk Enterprise deployed as IaaS on Azure. How did you resolve your problem? T

There're a lot of information about Splunk and S3 on AWS, but sadly not for Blob Storage & Azure

 

 

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...