Azure Firewall

[rahul2gupta]

Hi @gcusello ,

I want to check if in our environment splunk receives data/logs into azure firewall. if it doesn't receives is there a way we can ingest data into azure firewall.

Can you please guide us how to check above query?

Regards,

Rahul

[inventsekar]

Hi @rahul2gupta  To understand whether you already ingested azure firewall logs to splunk, please check your sourcetypes and see if there are any sourcetypes with azure in them. 

To integrate Azure firewall logs to splunk, please check these apps:

https://splunkbase.splunk.com/app/3110/

https://splunkbase.splunk.com/app/3534/

this one is too good, with screenshots:

https://www.splunk.com/en_us/blog/cloud/splunking-microsoft-azure-monitor-data-part-1-azure-setup.ht...

https://medium.com/@maarten.goet/microsoft-azure-sentinel-not-your-daddys-splunk-3775bda28f39