Hi guys,
I noticed the Splunk Add-on for Microsoft Azure has been updated on the 25th April, but still no support for reading in the WADLogsTable in the notes.
Is there any plan to support the reading of this critical table as we do a lot of work in Azure and being able to read and alert on this table would be gold.
Yes, there are plans for this. In the meantime, you can use the new generic Azure Storage Table input to pull the data from the WADLogsTable.
Yes, there are plans for this. In the meantime, you can use the new generic Azure Storage Table input to pull the data from the WADLogsTable.
Awesome! I will try this thank you Mr. Conger.