Data Manager Enables Microsoft Azure Data Onboarding!

On the heels of several exciting developments about Splunk Cloud Platform announced at .conf22, I am excited to share today that Data Manager now supports onboarding of Microsoft Azure data sources, effective immediately. This means you can use the same Data Manager application in your Splunk Cloud Platform to onboard critical Azure data sources — including Azure Active Directory logs and Azure Activity logs — to generate actionable insights in Splunk related to sign-in patterns, critical alerts related to Azure resource modifications, system activities related to users, groups, and applications, and gain visibility into the health status of critical resources.

The availability of Azure data onboarding is in addition to AWS data onboarding that was enabled earlier this year. Data Manager ships as a built-in application in Splunk Cloud Platform and is available today to all Splunk Cloud Platform customers who have chosen AWS as their provider and are on Victoria and Classic (except GovCloud US-West and US-East) experiences.

By providing minimum information about your cloud environments in Data Manager’s rich user interface, you can easily onboard data from both AWS and Azure, and manage your configured data inputs from one central location, irrespective of which cloud provider’s data you are bringing in.

“The thing that impressed me the most about Data Manager was it took less than 30 min to set up what before took several hours of multiple sessions with our cloud team over the course of several weeks. Being able to import, action, and monitor your data that fast is impressive.” - Joseph Schooler, Data Scientist, Cirrus Logic

Key Capabilities and Use Cases Enabled Through this Launch

All prerequisites and relevant Azure setup information is easily accessible and consumable through the Data Manager UI with in-context documentation along with a flow diagram of the setup (shown above). You can even choose to send data from each Azure service to a different Splunk index. We also auto-generate the Azure Resource Manager (ARM) templates for you with clear steps to run them in your Azure environment through PowerShell or CLI, providing transparency for you and your Azure admin to review the setup at any time. Once set up, your data input configuration is easy to monitor in Splunk through a single pane of glass to help ensure your Azure data flows into Splunk smoothly.

Onboarding Azure Data Sources in Data Manager

Now lets see Data Manager in action, where you’ll learn how to onboard Azure Active Directory logs in Data Manager, how Azure resources such as Event Hubs, Azure Storage, and Azure functions are set up in your Azure environment using the ARM template from Data Manager, and how the data starts flowing immediately after the Azure data input is successfully created in Data Manager.

YouTube video player

That’s how simple it is to onboard Azure Active Directory logs in Splunk using Data Manager! In case you are also interested in onboarding Azure Activity logs, all you have to do is create a new data input in Data Manager and follow the configuration steps in the Data Manager UI. For more information, please see onboarding Azure data in Data Manager.

Try out this new capability today to help you get to the cloud faster while making your data work for you.

Have feedback? Share your thoughts with us and other uses on the Splunk Community.

----------------------------------------------------
Thanks!
Sulay Shah

/en_us/blog/fragments/digital-resilience-pays-off
Style
two-column

Related Articles

Exploratory Data Analysis for Anomaly Detection
Platform
4 Minute Read

Exploratory Data Analysis for Anomaly Detection

With great choice comes great responsibility. One of the most frequent questions we encounter when speaking about anomaly detection is how do I choose the best approach for identifying anomalies in my data? The simplest answer to this question is one of the dark arts of data science: Exploratory Data Analysis (EDA).
Splunk at the Service of Medical Staff
Platform
3 Minute Read

Splunk at the Service of Medical Staff

Given the current circumstances and the pressure medical staff and hospitals are facing in general, access to information is now more critical than ever. Optimising the process of medical exams and enabling alerts and notifications in real-time has become essential.
A Picture is Worth a Thousand Logs
Platform
3 Minute Read

A Picture is Worth a Thousand Logs

Splunk can be used to ingest machine-learning service information from services like AWS recognition, what does that look like and how can you set it up?
Bringing You Context-Driven, In-Product Guidance
Platform
1 Minute Read

Bringing You Context-Driven, In-Product Guidance

Splunk is providing in-product guidance right at your fingertips to help you accomplish your goals without navigating away from the product. Learn more in this blog post.
Splunk AR: HoloLens and Unity SDK
Platform
2 Minute Read

Splunk AR: HoloLens and Unity SDK

Get a sneak peek on two private beta products — AR app for HoloLens, a solution for a hands-free experience, and a Splunk SDK to allow you to securely incorporate Splunk data into your custom apps.
Threat Hunting With ML: Another Reason to SMLE
Platform
4 Minute Read

Threat Hunting With ML: Another Reason to SMLE

This blog is the first in a mini-series of blogs where we aim to explore and share various aspects of our security team’s mindset and learnings. In this post, we will introduce you to how our own security and threat research team develops the latest security detections using ML.
Creating a Fraud Risk Scoring Model Leveraging Data Pipelines and Machine Learning with Splunk
Platform
8 Minute Read

Creating a Fraud Risk Scoring Model Leveraging Data Pipelines and Machine Learning with Splunk

One of the new necessities we came across several times was that the clients were willing to get a sport bets fraud risk scoring model to be able to quickly detect fraud. For that purpose, I designed a data pipeline to create a sport bets fraud risk scoring model based on anomaly detection algorithms built with Probability Density Function powered by Splunk’s Machine Learning Toolkit.
Levelling up your ITSI Deployment using Machine Learning
Platform
2 Minute Read

Levelling up your ITSI Deployment using Machine Learning

To help our customers extract the most value from their IT Service Intelligence (ITSI) deployments, Splunker Greg Ainslie-Malik created this blog series. Here he presents a number of techniques that have been used to get the most out of ITSI using machine learning.
Smarter Noise Reduction in ITSI
Platform
8 Minute Read

Smarter Noise Reduction in ITSI

How can you use statistical analysis to identify whether you have an unusual number of events, and how can similar techniques be applied to non-numeric data to see if descriptions and sourcetype combinations appear unusual? Read all about it in this blog.
/en_us/blog/fragments/about-splunk
/en_us/blog/fragments/subscribe-footer