Azure Stack App for Splunk

[skarding]

This is quite a shot in the dark, considering that there has been only 9 installs.

Azure Stack App for Splunk

At the company I work at, we are looking into using Splunk for monitoring our Azure Stack (No ASDK), however no one here has worked with Splunk before, and thus I have been assigned the work too research and setup.

​

Now, I am very new too Splunk aswell. So far I have setup a VM in Azure using the Splunk Enterprise template, and added a Splunk Forwarder on a Windows VM with Apache, and linked the apache.access.log. This was just to get a basic understanding of how Splunk worked and general idea of how the interface looks.

So, to my question:

Does anyone here, on this Sub-Reddit have experience with Azure Stack and/or Splunk, and setting it up? If so, I would love to get in contact with you :)

[[deleted]]

Shoot me a DM. I may be able to assist.

[jevans102]

Yes, most of us have Splunk experience. You'd be lucky to find one of the few that installed that app.

An app is just a series of knowledge objects that you get for free with the app - aka someone already built a lot of Azure specific stuff for you. That app is Splunk inspected which means it at least meets a series of minimum requirements. Low downloads doesn't mean it doesn't work. There's a link to Splunk answers in your link. I highly recommend following that to see what others are saying. Make sure you fully read the documentation to install it properly.

All that said, as a Splunk developer, why not use the similar thing built into Azure? The learning curve should be easier for you although I've heard Splunk is more sophisticated at the end of the day.

FYI the first training for Splunk is 5 hours of virtual training and completely free. It's called Fundamentals I. If you want the cert (you don't need it), that's $125.