Expanding the Azure Local Security Ecosystem with IBM QRadar and Splunk

Contributing author Ariel Netz, Partner Group Product Manager, Azure Edge Security

As regulatory obligations, resilience requirements, and the need for greater control over data and infrastructure continue to grow, we are seeing increasing interest in Azure Local from governments, critical infrastructure operators, defense organizations, and regulated industries looking to deploy cloud capabilities within customer-controlled environments.

These customers often have unique operational, compliance, and sovereignty requirements. Some operate in highly regulated environments with strict controls over data movement. Others require security operations capabilities that can integrate with existing investments and established operational processes.

Today, I am pleased to announce two new security monitoring integrations for Azure Local with IBM QRadar and Splunk. These integrations enable organizations to incorporate Azure Local security signals into their established security operations platforms, augmenting monitoring and investigation workflows while preserving the tools and processes their teams already rely on.

Building a Stronger Ecosystem for Azure Local

Security has always been a foundational principle of Azure Local. At the same time, we recognize that many customers operate environments where security operations investments and processes are already established and vetted. As Azure Local expands into new industries and sovereign private cloud scenarios, integration with these existing security operations investments becomes increasingly important.

By working closely with IBM QRadar and Splunk, we are expanding the partner ecosystem available to Azure Local customers enabling organizations to incorporate Azure Local security signals into their established security monitoring and investigation workflows. This approach gives organizations the flexibility to maintain continuity in their tools and processes while extending Azure Local capabilities into their existing security infrastructure.

Security Monitoring with IBM QRadar and Splunk

Azure Local has security built directly into the platform, with controls such as CIS- and DISA STIG-aligned security baselines, BitLocker encryption, Microsoft Defender Antivirus, and Attack Surface Reduction to help protect data and reduce risk. Beyond these built-in protections, Azure Local also generates security-relevant audit logs and alerts that integrate with partner security solutions for monitoring and investigation. (See: Manage syslog forwarding for Azure Local - Azure Local | Microsoft Learn)

Whether customers are modernizing existing infrastructure, deploying new sovereign private cloud environments, or extending established security operations processes to Azure Local deployments, these integrations help simplify adoption by building on technologies they already know and trust.

IBM QRadar

Splunk

Looking Forward

Microsoft is actively engaging with partners across additional security categories, including endpoint detection and response, vulnerability management, and container security, to expand customer choice over time. These integrations reflect our ongoing investment in a broader security ecosystem for Azure Local and Sovereign Private Cloud deployments.

If you would like to learn more about Azure Local and these partner integrations, please contact your Microsoft account team.

Organizations interested in exploring partnership opportunities can reach out to aldopm@service.microsoft.com.