This add-on collects estimated billing and consumption data from Microsoft Azure.

Billing Period
Currency
Meter Details
Pre-tax Cost
Usage Quantity

About

Version: 1.1.0
Vendor Products: Microsoft Azure Consumption API
Splunk platform versions: 6.5 and later
Platforms: Platform independent
Visible: Yes, this add-on contains configuration

Installing

Where to install this add-on

Unless otherwise noted, all supported add-ons can be safely installed to all tiers of a distributed Splunk platform deployment. See Where to install Splunk add-ons in Splunk Add-ons for more information.

This table provides a reference for installing this specific add-on to a distributed deployment of Splunk Enterprise.

Splunk platform component	Supported	Required	Comments
Search Heads	Yes	Yes	This add-on contains search-time knowledge. It is recommended to turn visibility off on your search heads to prevent data duplication errors that can result from running inputs on your search heads instead of (or in addition to) on your data collection node.
Heavy Forwarders	Yes	No (but recommended)	It is recommended to install this add-on on a heavy forwarder for data collection. Data collection should be configured in only 1 place to avoid duplicates.
Indexers	Yes	No	Not required as the parsing operations occur on the forwarders.
Universal Forwarders	No	No	Universal forwarders are not supported for data collection because the modular inputs require Python and the Splunk REST handler.

Configuration

Access Splunk Web on the node of your Splunk platform installation that collects data for this add-on.
Launch the add-on, then click Configuration > Add-on Settings.
Enter the Client ID that Azure AD automatically assigned to your integration application.
In the Client Secret field, enter the secret key that you created for your application in the Azure AD console.
Click Save.
Click the Inputs menu item.
Click Create New Input.
Give the input a name.
Enter an interval (how often this input collects data).
Select an index.
Enter the Tenant Domain for your Azure Active Directory
(optional) Select a Start Date to specify how far back to go when initially collecting data.

Release Notes

Version 1.1.0

Additional sourcetype added as sourcetype=azure:billing:period

Version 1.0.0

Initial release

Privacy

Use of this add-on is permitted subject to your obligations, including data privacy obligations, under your agreement with Splunk and Splunk's Privacy Policy.

Contributors

Jason Conger

Third-party software attributions

Refer to the README.md file in the root directory of this add-on for complete attributions.

Microsoft Azure Billing Add-on for Splunk

0