Hi
There are multiple ways to send data on splunk using azure blob storage.
1. Multiple events in a single file pushed to object store
2. Single event in a one single file
Now splunk can consume both approaches.
Which options are better for splunk integration with azure blob storage/s3 ?
what are the technical insights for both approaches ?
