Splunk® Supported Add-ons

Splunk Add-on for Microsoft Cloud Services

Hardware and software requirements for the Splunk Add-on for Microsoft Cloud Services

To install and configure the Splunk Add-on for Microsoft Cloud Services, you must be a member of the admin or sc_admin role.

You do not need a special role to use this add-on's troubleshooting dashboard.

Microsoft account and related modular inputs

The Splunk Add-on for Microsoft Cloud Services uses two types of Microsoft accounts to collect data: the Azure App account and the Azure Storage account.

  • If you want to collect data from the Azure Audit, Azure Resource, Azure Metrics, Azure Consumption (Billing) and Azure KQL inputs, you must first apply for an Azure app account. Then, connect your Azure app account to the Splunk Add-on for Microsoft Cloud Services.
  • If you want to collect data from the Azure Storage Table input, which includes virtual machine metrics, or the Azure Storage Blob input, you must first apply for an Azure Storage account. Then, connect your Azure Storage account to the Splunk Add-on for Microsoft Cloud Services.

Microsoft account permission requirements

To collect data from Azure audit and Azure resources, you must configure an Azure Active Directory Application with read permissions. See Add permissions to your Active Directory Application.

To collect data from Azure storage table and Azure storage blob, see configure the storage account to get data.


Azure Government Cloud limitations

The Splunk Add-on for Microsoft Cloud Services has not been tested with Azure Government Cloud. The functionality of the Splunk Add-on for Microsoft Cloud Services responsible for Azure Government Cloud data is not supported and is provided "as is", and should be used at your own risk.

Performance reference for the Splunk Add-on for Microsoft Cloud Services

For reference information about each performance tested inputs for the Splunk Add-on for Microsoft Cloud services, see the following topics in this manual:

Many factors impact performance results, including file size, file compression, event size, deployment architecture, batch size for event hub file size, and hardware. Results represent reference information and do not represent performance in all environments.

Splunk platform requirements

Because this add-on runs on the Splunk platform, all the system requirements apply for the Splunk software that you use to run this add-on.

For information about installation locations and environments, see Install the Splunk Add-on for Microsoft Cloud Services.

Support for macOS

The Splunk Add-on for Microsoft Cloud Services has not been tested with any versions of the macOS operating system. Running the Splunk Add-on for Microsoft Cloud Services is not supported and is provided "as is", and should be used at your own risk.

Last modified on 05 February, 2024
Release history for the Splunk Add-on for Microsoft Cloud Services   Installation overview for the Splunk Add-on for Microsoft Cloud Services

This documentation applies to the following versions of Splunk® Supported Add-ons: released


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters