Splunk Dev

Implementing Splunk in Azure Functions

rallapallisagar
New Member

HI Team, we are trying to implement splunk in the azure functions .But we dont have any idea ,how to implement it. I  read we cant pass the custom logs from functions to Splunk.Can u pls helps us here with sample code and approach ?

Thanks,

R.Sagar

Labels (2)
0 Karma

Comandereric
Engager

Did you find a solution @rallapallisagar ?

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Can you open with some words what you are exactly trying to do?

0 Karma

Comandereric
Engager

Sure we have some Azure functions running with C# or Java code there for we have some custom log statements they go into the Eventhub and than to Splunk but Splunk have a problem with the format which comes from the Eventhub (nested jsons) eventhough the log messages are microsoft standard...

0 Karma

isoutamo
SplunkTrust
SplunkTrust

I have used eventhub with splunk without issues e.g. with AKS and other logs. Just use https://splunkbase.splunk.com/app/3110 this app to ingest those. 

0 Karma

aasabatini
Motivator

Hi @rallapallisagar 

Ithink the best way to start to collect azure event logs is read these two articles

https://www.splunk.com/en_us/blog/tips-and-tricks/getting-microsoft-azure-data-into-splunk.html

https://www.splunk.com/en_us/blog/platform/splunking-azure-event-hubs.html

However, if these articles aren't enough, please don't hesitate to ask

Regards

Alessandro

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...