Skip to content

Commit edfd164

Browse files
Merge pull request #225166 from guywi-ms/splunk-migration-to-aml-benefits
Update migrate-splunk-to-azure-monitor-logs.md
2 parents 2d57d7b + d7905a4 commit edfd164

File tree

1 file changed

+17
-5
lines changed

1 file changed

+17
-5
lines changed

articles/azure-monitor/logs/migrate-splunk-to-azure-monitor-logs.md

Lines changed: 17 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,17 +17,29 @@ ms.date: 01/27/2023
1717

1818
Azure Monitor Logs collects data from a wide variety of sources, including Windows Event logs, Syslog, and custom logs, to provide a unified view of all Azure and non-Azure resources. Using a sophisticated query language and curated visualization you can quickly analyze millions of records to identify, understand, and respond to critical patterns in your monitoring data.
1919

20-
This article explains how to migrate your Splunk, Splunk Cloud, or Splunk Enterprise deployment to Azure Monitor Logs for logging and log data analysis.
20+
This article explains how to migrate your Splunk Observability deployment to Azure Monitor Logs for logging and log data analysis.
2121

2222
For information on migrating your Security Information and Event Management (SIEM) deployment from Splunk Enterprise Security to Azure Sentinel, see [Plan your migration to Microsoft Sentinel](../../sentinel/migration.md).
23+
## Why migrate to Azure Monitor?
2324

24-
## Compare offerings
25+
The benefits of migrating to Azure Monitor include:
26+
27+
- Fully managed, Software as a Service (SaaS) platform with:
28+
- Automatic upgrades and scaling.
29+
- [Simple per-GB pay-as-you-go pricing](https://azure.microsoft.com/pricing/details/monitor/).
30+
- [Cost optimization and monitoring features](../../azure-monitor/best-practices-cost.md) and low-cost [Basic logs](../logs/basic-logs-configure.md).
31+
- Cloud-native monitoring and observability, including:
32+
- [End-to-end, at-scale monitoring](../overview.md).
33+
- [Native monitoring of Azure resources](../essentials/platform-logs-overview.md).
34+
- [Privacy and compliance](../security-controls-policy.md).
35+
- Native integration with a range of complementary Azure services, such as [Microsoft Sentinel](../../sentinel/overview.md) for security information and event management, [Azure Logic Apps](../../logic-apps/logic-apps-overview.md) for automation, [Azure Managed Grafana](../../managed-grafana/overview.md) for dashboarding, and [Azure Machine Learning](../../machine-learning/overview-what-is-azure-machine-learning.md) for advanced analysis and response capabilities.
36+
37+
## Compare offerings
2538

2639
|Splunk offering|Azure offering|
2740
|---|---|
28-
|Splunk, Splunk Cloud|[Azure Monitor](../overview.md) is an end-to-end solution for collecting, analyzing, and acting on telemetry from your cloud, multicloud, and on-premises environments.|
29-
|Splunk Enterprise|[Azure Monitor](../overview.md) offers enterprises a comprehensive solution for monitoring cloud, hybrid, and on-premises environments, with [network isolation](../logs/private-link-security.md), [resilience features and protection from data center failures](../logs/availability-zones.md), [reporting](../overview.md#insights-and-curated-visualizations), and [alerts and response](../overview.md#respond-to-critical-situations) capabilities. |
30-
|Splunk Enterprise Security|[Microsoft Sentinel](../../sentinel/overview.md) is a cloud-native solution that provides intelligent security analytics and threat intelligence across the enterprise.|
41+
|Splunk Observability|[Azure Monitor](../overview.md) is an end-to-end solution for collecting, analyzing, and acting on telemetry from your cloud, multicloud, and on-premises environments, built over a powerful data ingestion pipeline that's shared with Microsoft Sentinel. Azure Monitor offers enterprises a comprehensive solution for monitoring cloud, hybrid, and on-premises environments, with [network isolation](../logs/private-link-security.md), [resilience features and protection from data center failures](../logs/availability-zones.md), [reporting](../overview.md#insights-and-curated-visualizations), and [alerts and response](../overview.md#respond-to-critical-situations) capabilities.|
42+
|Splunk Security|[Microsoft Sentinel](../../sentinel/overview.md) is a cloud-native solution that runs over the Azure Monitor platform to provide intelligent security analytics and threat intelligence across the enterprise.|
3143
## Introduction to key concepts
3244

3345
|Azure Monitor Logs |Similar Splunk concept|Description|

0 commit comments

Comments
 (0)