Splunk Enterprise

SAML authentication with Azure

franciscof
Explorer

Hi guys,

I´m trying to integrate Splunk with SAML authentication and as you may know I have to download a file from Azure and another from Splunk and upload them in the other platform. The thing is that the file I download from Splunk has the "location" field (which is the hostname IP) separated via "-" and not "." so Azure can´t resolve the hostname. This is the "Location" field: 

franciscof_0-1606763503924.png

Also, when I change this value manually it breaks my distributed search configured on m indexers.

Does anyone know how to replace this value in order for Azure to resolve the hostname and finish this SAML integration?

 

Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...