Integration with Splunk

[mattyn07]

Has anyone had success integrating Power Platform monitoring and splunk? I know the Power Platform comes in built with the COE starter kit for monitoring however we use splunk as our core tool for this so interested to see whether it was achievable or not

[kir6680]

This will be very good integration point as many corporates use splunk and would like to keep using it for Power platform as well.

[DeviKrishna]

Hi @mattyn07 @kir6680 ,

I don't think there is an existing connector available in power automate yet. But there are multiple options available to get this data in powerapps.

Splunk data can be pushed to a SQL data base / any web api exposed from Splunk can also be accessed in PowerApps.

Lets hear from others on their thought and approach.

Regards

Devi

[kir6680]

Hi @DeviKrishna the integration scenario is from Power Apps COE to splunk. Not sure if it will be supported by Microsoft but export of activity logs from Power Platform COE to splunk will be a great feature!

[kir6680]

Yes, finally I was able to integrate Splunk with Power Platform Activity audits.

It is basically multi step process:

1. Add-on in Splunk https://splunkbase.splunk.com/app/4055/ 

2. Register new app in Azure AD App Registration.

3. Provide registered app Office 365 Management API permissions.

4. Use tenant details in Splunk Add-on.

5. Enable Activity Audits from Microsoft compliance center.

And then you can see all activities in Splunk.