Splunk Dev

How to add storage account input having sub-folder path in Azure for Splunk Add-on for Microsoft Cloud Services

jaihingorani
Path Finder

Hi i have installed  Splunk Add-on for Microsoft Cloud Services in my heavy forwarder instance, and the app has been working as expected, with 7-8 inputs configured (storage account inputs). Now i am trying to add a new storage account where the container resides in a sub-folder.

My existing inputs folder pattern in Azure(which works fine) :

Storage account -> containers -> <my_container_name>

inputs.conf as below

[mscs_storage_blob://myfirstblob]
account = my_account_name
blob_mode = append
collection_interval = 300
container_name = <my_container_name>
index = index1
sourcetype = mscs:storage:blob:myfirstblob
python.version = python2

I Need help with configure this patter path :

Storage account -> containers -> <my_folder> -> <my_container_name>

i have tried multiple patterns like below but does not seems to be working

inputs.conf

[mscs_storage_blob://myfirstblob]
account = my_account_name
blob_mode = append
collection_interval = 300
container_name = containers/<my_folder>/<my_container_name> (OR this as well /<my_folder>/<my_container_name>)
index = index1
sourcetype = mscs:storage:blob:myfirstblob
python.version = python2

Labels (2)
0 Karma
Get Updates on the Splunk Community!

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...

4 Ways the Splunk Community Helps You Prepare for .conf25

.conf25 is right around the corner, and whether you’re a first-time attendee or a seasoned Splunker, the ...