User Import for Splunk ES Asset & Identity Framework

[splunker2k24]

Hi,

I'm currently looking to gather information for asset & identity framework for Splunk ES. We are using Splunk Cloud. I'd like to get the identity and asset information from Microsoft Azure. I'm aware that there are lot of add-ons available for us to use, but I'm confused which one to choose. Which will help me for my scenario?

1. Splunk Add-on for Microsoft Azure
2. Splunk Add-on for Microsoft Office 365
3. Splunk Add-on for Microsoft Security
4. Splunk Add-on for Microsoft Cloud Services

Which app should I focus on? Which apps are no longer supported?

I'm thinking of using 'Splunk-add-on-microsoft-azure' app for this because it helps with users, devices, groups information based on the documentation - https://github.com/splunk/splunk-add-on-microsoft-azure/wiki/Create-an-Azure-AD-App-Registration But I see the app (https://splunkbase.splunk.com/app/3757) is not supported. Does anyone use this app? Can we use non supported apps in production?

Thanks!

[VatsalJagani]

@splunker2k24 - You can use this App.

App not supported meaning that App is not supported by Splunk Support. But App is still valid and developed by "Splunk Works".

And this App is one of the widely used App so you should be good with it.

I hope this helps!!! 

[splunker2k24]

Can you help me with the first part of question about 'Splunk Add-on for Microsoft Office 365'?