splunk
Azure Event Hub Insights App
This app has been archived. Learn more about app archiving.
This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
Details
Azure Event Hub Insights App provides dashboards for analyzing Azure Event Hub data. The app visualizes data to perform both metric and operational level analysis.
This app works with the Solsys Event Hub Consumer which will pull the event data from Event Hubs
This app works with the Solsys Event Hub Consumer which will pull the event data from Event Hubs
Pre-requisite:
- Install Solsys Azure Event Hub Consumer
- Onboard data from Operational Insights Logs Event Hub
Installation Instructions:
- In Browse Apps on your Splunk Instance search for "Azure Event Hub Insights App"
- Restart Splunk
Configure:
- Modify the
azure_eventhub_indexmacro to correct reflect the index the eventhub data is going to - Modify the
azure_eventhub_op_insight_sourcetypemacro to reflect the same sourcetype as the insights-operational-logs eventhub data is onboarded with
Dashboards:
- EventHub Meta Analysis: Meta information on eventhub data onboarded to Splunk (e.g EH namespaces/entities. )
- EventHub Activity Dashboard : Insights on the Event hub level activities and metric data.
- Resource Group Audit Dashboard : Information on the activites and logs on a resource group level basis.
- Event Hub Log Meta Insight: View all sourcetypes onboarded to eventhub index and interrogate data.
- User Activity Audit: Monitor User actions in Azure Portal
- EventHub Operational Activity: Monitor activity types, categories and results
Details on Solsys Event Hub Connector
To download the User Guide for the Solsys Event Hub Consumer check our website (https://solsys.ca). The User guide covers implemention of the consumer as well as installation location/steps.
Release Notes
Version 2.0.0
May 28, 2020
This latest release of Azure Event Hub Insights App provides dashboards for understanding meta information of event hubs and will provide deep insights on the operational data associated with Azure.
This app works with the newly released Solsys Event Hub Consumer which is available in Splunk base.