Integrating Splunk with Microsoft Purview

Learn how to integrate Splunk into Microsoft Purview, explore ways to centralize metadata and lineage information, and go over data governance policies and requirements.

Introduction

• Integrating Splunk with Microsoft Purview
• What you should know

1. Overview of Splunk and Microsoft Purview

• Splunk in Microsoft Purview and its benefits
• Integrate M365 add-on with Splunk
• Azure integration with Splunk
• Splunk search and visualization
• Splunk dashboard
• How to add sample data in Splunk
• Challenge: Create a dashboard
• Solution: Create a dashboard

2. Splunk Data Ingestion

• Understanding data ingestion in Splunk
• Install and configure the Splunk Universal Forwarder on Windows
• Review operating systems with Splunk
• Microsoft Teams add-on for Splunk
• Monitor local machine logs with Splunk

3. Alerts and Reports

• M365 app add-on and alerting in Splunk
• Monitoring and reporting in Splunk
• Log management

Conclusion

• Use cases for Splunk
• Additional resources