Microsoft: Azure Storage
Azure Storage offers scalable, durable, and secure storage for a variety of data objects in the cloud. Azure Storage data objects are accessible over HTTP or HTTPS via a REST API. Azure Storage also offers client libraries for developers building applications or services, and IT professionals can use Azure PowerShell and Azure CLI to write scripts for data management or configuration tasks.
Configuration
Guidance for onboarding data can be found in the Spunk Documentation:
- Getting Data In (Splunk Enterprise)
- Getting Data In (Splunk Cloud)
- Get data into Splunk Observability Cloud
Refer to the documentation, and note the following:
- Source type:
mscs:storage:tableandmscs:storage:blob - Add-on or app: Splunk Add-on for Microsoft Cloud Services
Application
When your Splunk deployment is ingesting Azure storage data, you can use it to accomplish the following use cases.