Microsoft Azure Add on for Splunk

This add-on collects data from Microsoft Azure including the following: * Azure AD Data - Users - Azure AD user data - Sign-ins - Azure AD sign-ins including conditional access policies and MFA - Directory audits - Azure AD directory changes including old and new values *Event Hubs - generic Event Hub collector * Metrics * Estimated billing and consumption * Inventory metadata - Resource Groups - Resource group configuration - Virtual Machines - VM, Disk, Image, and Snapshot configurations - Virtual Networks - VNET, NSG, and Public IP configurations - Managed Disks - Subscriptions - Subscription name, ID, and type - Topology - IaaS relationships * Azure Security Center - Alerts - Tasks * Azure Resource Graph Version 3.0.0 and later of the Microsoft Azure Add-on for Splunk is compatible only with Splunk Enterprise version 8.0.0 and above.