4 ms·
I just use Splunk forwarders and indexers on Stack Hub. Log analytics on Azure Cloud. What issues are you having? I couldn’t get our security team to approve th
by firesteelrain 3y ago
I just use Splunk forwarders and indexers on Stack Hub. Log analytics on Azure Cloud. What issues are you having? I couldn’t get our security team to approve the use otherwise
- _8j50 3y agoNSG flow logs, storage container access logs and in general MS insisting on using graph api for logs, eventhub hasn't been better but all of it costs a lot in just egress and inter-regional data transfer costs, unless! You use their security products and sentinel!
- firesteelrain 3y agoThis is what I use for NSGs: https://learn.microsoft.com/en-us/azure/developer/terraform/create-network-watcher-nsg-flow-logs https://learn.microsoft.com/en-us/azure/developer/terraform/... But I do a lot at the Edge because I am required to as opposed to “Azure Proper” so I am my own MSP.
- _8j50 3y agoBeing subscription level is a big problem. Not just implementation complexity but cost.
- firesteelrain 3y agoStack Hub/Edge is also subscription based. It’s all in what you pay for. But all cloud services are ‘subscription based’
- _8j50 3y agoNo, I mean azure subscription, as in not tenant level.