Hi guys, I noticed the Splunk Add-on for Microsoft Azure has been updated on the 25th April, but still no support for reading in the WADLogsTable in the notes. Is there any plan to support the reading of this critical table as we do a lot of work in Azure and being able to read and alert on this table would be gold. ... View more

Hello! I was wondering how to use a directory name (segment) as an event tag. For example: C:\bin\code\python\test_system\scoring\results\16\17055079037\some files log files here or in directory's below this. The system outputs many hundreds of directories at the 17055079037 level. I don't want to segment on host, source, or sourcetype (as I have manually defined these to cut the console spam). I'd just want the 17055079037 level to be reported as an event attribute, so when I open the error log within Splunk, I can readably see that the log file originated from the 17055079037 directory. I am guessing this is something to do with segmentation, but I don't know how to configure the inputs.conf for this. Any suggestions gratefully received. ... View more