Getting Data In

unable to get MS Azure event hub using Splunk Addon for Microsoft cloud services add on

Sachin
Loves-to-Learn

Hi,

I am using Splunk Addon for Microsoft cloud services add on to integrate splunk with MS Azure.

I want to ingest event hub data to Splunk and for that i have done all the prerequisite we needed like app registration on azure side and configured azure app account in Splunk Addon for Microsoft cloud services on Splunk. Then i configured the Azure event hub input in splunk add on. But i am not able to get event hub data on splunk.

But i configured Azure Audit logs input on splunk add on  then i am able to get audit logs on splunk.

Can anyone please help me what can be issue?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...