Hi everyone, In Splunk Cloud, I am trying to monitor Azure Load Balancer metrics using the Splunk Add-on for Microsoft Cloud Services. The Microsoft.Network/loadBalancers namespace has been includ...
See more...
Hi everyone, In Splunk Cloud, I am trying to monitor Azure Load Balancer metrics using the Splunk Add-on for Microsoft Cloud Services. The Microsoft.Network/loadBalancers namespace has been included in the Azure Metrics input configuration, and from the _internal logs, it seems that the data is being retrieved correctly. For example, in the logs from mscs_azure_metrics_collector.py, I see the following entry, which suggests that the metrics are being collected: 2025-04-01 07:34:06,096 +0000 log_level=INFO, pid=3442478, tid=ThreadPoolExecutor-0_4, file=mscs_azure_metrics_collector.py, func_name=_index_resource_metrics, code_line_no=526 | Chunked metrics timespan: 2025-04-01T06:28:04Z/2025-04-01T06:33:06Z for resource /subscriptions/<subscripition-id>/resourceGroups/<resource-group-id>/providers/Microsoft.Network/loadBalancers/<load-balancer-name> However, when I try to find these metrics in Splunk, they are missing. I ran the following query to check the indexes: | mcatalog values(resource_id) WHERE index=* by resource_id, index, metric_name, namespace But there is no trace of the Load Balancer. The only namespaces I see are: microsoft.compute/virtualmachines microsoft.network/virtualnetworkgateways microsoft.storage/storageaccounts Even though the following namespaces have been configured in the input settings: Microsoft.Compute/virtualMachines Microsoft.Storage/storageAccounts Microsoft.Storage/storageAccounts/blobServices Microsoft.Storage/storageAccounts/fileServices Microsoft.Storage/storageAccounts/queueServices Microsoft.Storage/storageAccounts/tableServices Microsoft.Network/loadBalancers Microsoft.Network/applicationGateways Microsoft.Network/virtualNetworkGateways Microsoft.Network/azureFirewalls Does anyone know where these metrics might be going? Is there another way to verify if Splunk is actually indexing Load Balancer metrics? Thanks in advance for any help!