Azure logs include information like service health, recommendations, security, activity, and more.  An Azure Log (AzLog) feature was made available to simplify the task of integrating the logs with on-premises apps. AzLog will be deprecated by 06/01/2019.

Alternatives:

1.) Stream logs directly to Splunk from Azure using StreamWeaver platform

2.) Utilize Azure Event Hubs to stage data before sending to Splunk

3.) Splunk for Azure Logs App (not available)

StreamWeaver enables sending Azure Logs data to Splunk in real time, avoiding the additional step to stage the data first in Azure Event Hubs. This provides a cost-effective solution that allows customers to integrate Azure to Splunk in 3 minutes (or less!).

StreamWeaver for Azure Logs Features:

* One-time setup to send Azure logs on a per-subscription basis

* Enables logs collection for both monitoring and security uses-cases

* Secure collection and transmission of log files across data centers from Cloud to On Prem or Cloud-to-cloud

* TCO is 10x less than the alternatives considering all hardware, services, and software investments

* Virtually unlimited scalability through horizontal addition of Azure cloud Kubernetes nodes and Azure Virtual Machines

* Highly available and guaranteed delivery of Azure Log events

* One-time setup to send Azure logs on a per-subscription basis

* Enables logs collection for both monitoring and security uses and all log data types available

* Secure collection and transmission of log files across data centers

* Avoid having to roll your own API-based REST integration, and the ongoing maintenance & support

StreamWeaver for Azure LogsStreamWeaver

StreamWeaver for Azure Logs

StreamWeaver

StreamWeaver for Azure Logs

StreamWeaver

StreamWeaver for Azure Logs
StreamWeaver