Azure Data Sources

Name Platform Sourcetype Source Supported TA Date
Azure Active Directory MicrosoftGraphActivityLogs Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory NonInteractiveUserSignInLogs Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Add app role assignment to service principal Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Add member to role Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Add owner to application Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Add service principal Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Add unverified domain Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Consent to application Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Disable Strong Authentication Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Enable account Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Invite external user Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Reset password (by admin) Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Set domain authentication Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Sign-in activity Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Update application Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Update authorization policy Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Update user Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory User registered security info Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Audit Create or Update an Azure Automation account Azure icon Azure mscs:azure:audit mscs:azure:audit Splunk Add-on for Microsoft Cloud Services
Azure Audit Create or Update an Azure Automation Runbook Azure icon Azure mscs:azure:audit mscs:azure:audit Splunk Add-on for Microsoft Cloud Services
Azure Audit Create or Update an Azure Automation webhook Azure icon Azure mscs:azure:audit mscs:azure:audit Splunk Add-on for Microsoft Cloud Services
Azure Monitor Activity Azure icon Azure azure:monitor:activity Azure AD Splunk Add-on for Microsoft Cloud Services
Azure Active Directory Azure icon Azure azure:monitor:aad Azure AD Splunk Add-on for Microsoft Cloud Services