Data Manager Enables Microsoft Azure Data Onboarding!

On the heels of several exciting developments about Splunk Cloud Platform announced at .conf22, I am excited to share today that Data Manager now supports onboarding of Microsoft Azure data sources, effective immediately. This means you can use the same Data Manager application in your Splunk Cloud Platform to onboard critical Azure data sources — including Azure Active Directory logs and Azure Activity logs — to generate actionable insights in Splunk related to sign-in patterns, critical alerts related to Azure resource modifications, system activities related to users, groups, and applications, and gain visibility into the health status of critical resources.

The availability of Azure data onboarding is in addition to AWS data onboarding that was enabled earlier this year. Data Manager ships as a built-in application in Splunk Cloud Platform and is available today to all Splunk Cloud Platform customers who have chosen AWS as their provider and are on Victoria and Classic (except GovCloud US-West and US-East) experiences.

By providing minimum information about your cloud environments in Data Manager’s rich user interface, you can easily onboard data from both AWS and Azure, and manage your configured data inputs from one central location, irrespective of which cloud provider’s data you are bringing in.

“The thing that impressed me the most about Data Manager was it took less than 30 min to set up what before took several hours of multiple sessions with our cloud team over the course of several weeks. Being able to import, action, and monitor your data that fast is impressive.” - Joseph Schooler, Data Scientist, Cirrus Logic

Key Capabilities and Use Cases Enabled Through this Launch

All prerequisites and relevant Azure setup information is easily accessible and consumable through the Data Manager UI with in-context documentation along with a flow diagram of the setup (shown above). You can even choose to send data from each Azure service to a different Splunk index. We also auto-generate the Azure Resource Manager (ARM) templates for you with clear steps to run them in your Azure environment through PowerShell or CLI, providing transparency for you and your Azure admin to review the setup at any time. Once set up, your data input configuration is easy to monitor in Splunk through a single pane of glass to help ensure your Azure data flows into Splunk smoothly.

Onboarding Azure Data Sources in Data Manager

Now lets see Data Manager in action, where you’ll learn how to onboard Azure Active Directory logs in Data Manager, how Azure resources such as Event Hubs, Azure Storage, and Azure functions are set up in your Azure environment using the ARM template from Data Manager, and how the data starts flowing immediately after the Azure data input is successfully created in Data Manager.

YouTube video player

That’s how simple it is to onboard Azure Active Directory logs in Splunk using Data Manager! In case you are also interested in onboarding Azure Activity logs, all you have to do is create a new data input in Data Manager and follow the configuration steps in the Data Manager UI. For more information, please see onboarding Azure data in Data Manager.

Try out this new capability today to help you get to the cloud faster while making your data work for you.

Have feedback? Share your thoughts with us and other uses on the Splunk Community.

----------------------------------------------------
Thanks!
Sulay Shah

/en_us/blog/fragments/digital-resilience-pays-off
Style
two-column

Related Articles

Smarter Root Cause Analysis: Determining Causality from your ITSI KPIs
Platform
2 Minute Read

Smarter Root Cause Analysis: Determining Causality from your ITSI KPIs

Root cause analysis can be a difficult challenge when you are troubleshooting complex IT systems. In this blog, we are going to take you through how you can perform root cause analysis on your IT Service Intelligence (ITSI) episodes using machine learning, or more specifically causal inference.
Smarter ITSI Episodes Powered by Community Detection Algorithms
Platform
6 Minute Read

Smarter ITSI Episodes Powered by Community Detection Algorithms

In this blog we are going to describe how you can create a notable event policy in IT Service Intelligence (ITSI) that is able to group your events using labels generated by unsupervised machine learning in the Smart ITSI Insights App for Splunk – and don’t worry you don’t have to be a data scientist to read this blog!
Making Smarter Predictions in ITSI
Platform
3 Minute Read

Making Smarter Predictions in ITSI

As we are trying to commoditize machine learning through our MLTK smart workflows, this article outlines another example of an MLTK smart workflow, designed to help improve the usability of the predictive capabilities in ITSI.
Detecting Credit Card Fraud Using SMLE
Platform
4 Minute Read

Detecting Credit Card Fraud Using SMLE

In this blog post, we’ll explore an ML-powered solution using the Splunk Machine Learning Environment to detect fraudulent credit card transactions in real time. Using out-of-the-box Splunk capabilities, we’ll walk you through how to ingest and transform log data, train a predictive model using open source algorithms, and predict fraud in real-time against transaction events.
Splunk AR: Admin AR Web App
Platform
2 Minute Read

Splunk AR: Admin AR Web App

Check out how the Splunk AR web app allows administrators to manage their entire AR experience at scale and all in one unified place.
Get to Know Splunk Machine Learning Environment (SMLE)
Platform
5 Minute Read

Get to Know Splunk Machine Learning Environment (SMLE)

An introduction to SMLE Labs and a showcase of the various ML capabilities at a high level by walking you through the environment, step-by-step.
Walkthrough to Set Up the Deep Learning Toolkit for Splunk with Amazon EKS
Platform
6 Minute Read

Walkthrough to Set Up the Deep Learning Toolkit for Splunk with Amazon EKS

Splunk DLTK supports Docker as well as Kubernetes and OpenShift as container environments. In this article, we will go through the setup for using DLTK 3.3 and Amazon EKS as a kubernetes environment.
Advanced Painting with Data: Choropleth SVG
Platform
5 Minute Read

Advanced Painting with Data: Choropleth SVG

Curious about some more advanced use cases with Choropleth SVG in Splunk? Take a look at this blog to find out about animations, custom gauges, and why emojis matter!
Splunk Cloud Self-Service: Announcing The New Admin Config Service API
Platform
3 Minute Read

Splunk Cloud Self-Service: Announcing The New Admin Config Service API

The Admin Config Service is a set of modern REST APIs that will empower Splunk Cloud admins with a simple, yet powerful set of self-service capabilities.
/en_us/blog/fragments/about-splunk
/en_us/blog/fragments/subscribe-footer