Hi everyone, In Splunk Cloud, I am trying to monitor Azure Load Balancer metrics using the Splunk Add-on for Microsoft Cloud Services. The Microsoft.Network/loadBalancers namespace has been included in the Azure Metrics input configuration, and from the _internal logs, it seems that the data is being retrieved correctly. For example, in the logs from mscs_azure_metrics_collector.py, I see the following entry, which suggests that the metrics are being collected: 2025-04-01 07:34:06,096 +0000 log_level=INFO, pid=3442478, tid=ThreadPoolExecutor-0_4, file=mscs_azure_metrics_collector.py, func_name=_index_resource_metrics, code_line_no=526 | Chunked metrics timespan: 2025-04-01T06:28:04Z/2025-04-01T06:33:06Z for resource /subscriptions/<subscripition-id>/resourceGroups/<resource-group-id>/providers/Microsoft.Network/loadBalancers/<load-balancer-name> However, when I try to find these metrics in Splunk, they are missing. I ran the following query to check the indexes: | mcatalog values(resource_id) WHERE index=* by resource_id, index, metric_name, namespace But there is no trace of the Load Balancer. The only namespaces I see are: microsoft.compute/virtualmachines microsoft.network/virtualnetworkgateways microsoft.storage/storageaccounts Even though the following namespaces have been configured in the input settings: Microsoft.Compute/virtualMachines Microsoft.Storage/storageAccounts Microsoft.Storage/storageAccounts/blobServices Microsoft.Storage/storageAccounts/fileServices Microsoft.Storage/storageAccounts/queueServices Microsoft.Storage/storageAccounts/tableServices Microsoft.Network/loadBalancers Microsoft.Network/applicationGateways Microsoft.Network/virtualNetworkGateways Microsoft.Network/azureFirewalls Does anyone know where these metrics might be going? Is there another way to verify if Splunk is actually indexing Load Balancer metrics? Thanks in advance for any help!
... View more