Splunk® Supported Add-ons

Splunk Add-on for Microsoft Cloud Services

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Configure a storage account in Microsoft Cloud Services

To gather data from Azure Storage Table, Azure Storage Blob, and Azure Virtual Machine Metrics, you need to create or configure a storage account in Microsoft Azure.

Create and manage a storage account

See https://docs.microsoft.com/azure/storage/storage-create-storage-account in the Microsoft documentation for the instructions to create and manage the storage account.

Configure the Storage Account to get data

The Splunk Add-on for Microsoft Cloud Services provides two methods for you to get Azure storage table and Azure virtual machine metrics data. You can use either an Access Key or Account Token (SAS: Shared access signature) with the following steps.

If you want to get Azure storage blob data, you can also use None Secret to get the data without inputting a key or token.

Get storage account access key

  1. Log in to your Azure portal or Azure Government portal.
  2. Select the storage account you want to use.
  3. Copy either Key1 or Key2 of Access Key under Settings.

Get your storage account token

  1. Log in to your Azure portal or Azure Government portal.
  2. Select the storage account you want to use.
  3. In the Shared access signature drop-down list, configure your shared access signature based on the data you want to collect, such as allowed services, allowed resource types and start and expiry date/time under Settings. In the Allowed resource type section, verify that the Service box is checked.
  4. Generate your SAS and copy it to your clipboard.

Get storage blob data without key or token

  1. Login to your Azure portal or Azure Government portal.
  2. Select All resources in the menu, then select the storage account that that you want to use.
  3. Select Overview and then select Blobs under Services.
  4. Select the container you want to configure and then select Access policy.
  5. Select Container for the Access type.
Last modified on 05 February, 2024
PREVIOUS
Configure an active directory application in Azure Active Directory for the Splunk Add-on for Microsoft Cloud Services
  NEXT
Connect to your Azure app account with the Splunk Add-on for Microsoft Cloud Services

This documentation applies to the following versions of Splunk® Supported Add-ons: released


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters