Deployment Architecture

Splunk purchase - Some questions



We are going to evaluate Splunk but we are not sure that it will serve everything we need, to see if you can help us.
On the one hand we need to upload log files and process them (so far we do it with an old version of Elastic Search). They are mainly IIS logs.
We also want to collect metrics from the applications we develop. Applications that are on premises.

But we are also migrating part of the developments to Azure. We have there from databases to kubernetes and microservices. The Splunk page makes many references to AWS, but not to Azure. Can Splunk Monitor Azure Seamlessly? Monitor Kubernetes, the logs it generates, the microservices, etc.

I haven't commented on it, but we wouldn't install Splunk on our own server. Either it would be in your Cloud or directly in our Azure.



Labels (3)
0 Karma


Hi @mgfeal,

you can use Splunk Cloud (on AWS) or install it on your infrastructure (on premise or in your cloud), also Azure.

About the logs to monitor, you can monitor all kind of log, about Azure Seamlessly and Monitor Kubernetes, there are also spcific apps to ingest and parse logs, and to show results in dashboards.

For more infos you can search the apps you need in, for your knowledge: Add-ons are used to ingest and parse data, apps are used for showing data, so you could use:

You have only to choose the right one, and in Community you can find the experience of people that used the apps.

For each app, you have the possibility to download the app and the documentation.



Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...