Skip to main content
Warning
This app is archived. App archiving documentation
Azure IP Ranges app icon

Azure IP Ranges

This app adds a simple scripted input which, on a weekly basis downloads Microsoft's published list of public Azure IP ranges and builds them into a lookup table.Built by Hurricane Labs
splunk product badge

Default Version 1.0.1

January 31, 2024

Compatibility

Splunk Enterprise

Platform Version: 9.4, 9.3, 9.2, 9.1, 9.0

Rating
0
(0)

Log in to rate this app

Support
Archived Add-on

This app adds a simple scripted input which, on a weekly basis downloads Microsoft's published list of public Azure IP ranges and builds them into a lookup table. This app adds a simple scripted input which, on a weekly basis downloads Microsoft's published list of public Azure IP ranges (https://www.microsoft.com/en-us/download/details.aspx?id=56519) and builds them into a lookup. The input should run when first installed, and then every 7 days from there. The lookup in question is called "azure_public_ip_ranges" and is configured to allow for CIDR matching on the "prefix" field. Sample usage: |makeresults | eval ip="13.77.52.35" | lookup azure_public_ip_ranges prefix AS ip OUTPUT