Create a Microsoft Azure connection for Ingest Processor pipelines
Create a Microsoft Azure connection in the Data Management app to allow your pipelines to authenticate and send data to Azure storage containers.
Before you can send data from Ingest Processor to an Azure Blob Storage container or an Azure Data Lake Storage container, you must first create a Microsoft Azure connection in the Data Management app on Splunk Cloud Platform. This connection allows datasets and pipelines to access Azure storage containers by authenticating through a Microsoft Entra app registration.
- Your Splunk Cloud Platform deployment must be on version 10.4.2604 or higher.
- Your user account on the Splunk Cloud Platform deployment must have the
edit_datasetsandadmin_all_objectscapabilities. For more information, see the following pages:- Manage users for the Ingest Processor solution
- Define roles on the Splunk platform with capabilities in the Splunk Cloud Platform Manage Users and Security manual
-
To allow the Splunk platform to access Azure through the connection, you must complete the following tasks in Microsoft Entra ID:
Task Microsoft Entra documentation Register an app for your connection. https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app Add a client secret to the app registration. https://learn.microsoft.com/en-us/entra/identity-platform/how-to-add-credentials?tabs=client-secret Grant the Storage Blob Data Contributor role to the app registration. https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal -
Keep your app registration information open in a separate browser tab throughout the connection creation process, so that you can retrieve the required values for authenticating your connection.
Next, create a dataset that uses this connection to access your Azure container. You can then configure a pipeline to use this dataset as a destination and start sending data from Ingest Processor to the Azure container.
For more information, see Create a Microsoft Azure dataset for Ingest Processor pipelines.