Azure log analytics integration with ELK

Question

Azure log analytics integration with ELK

Bhuvaneswari Maddi (iCORE-CIS - iCORE-CIS) 41

Is this possible can we export events data from Azure Log Analytics and import in ELK?

Please share any reference documentation.

Accepted answer

0 additional answers

Your answer

Answer 1

Stanislav Zhelyazkov 28,186 MVP Volunteer Moderator

Hi,
This question is probably best to be asked on forums for Elastic Search product as any integration with Azure Monitor is done from that product. Never the less you probably could use Log Analytics data export functionality to send the data to Azure Event Hub and use Logstash Azure Event Hubs plugin to make it available in Elastic Search.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Bhuvaneswari Maddi (iCORE-CIS - iCORE-CIS) 41 Reputation points

2022-09-07T11:38:25.153+00:00

Thanks for your response. Where can i get the windows event logs data such as (Application,security,system,etc..) in Azure?
and how to export this data into ELK? Please suggest with detailed steps.
Bhuvaneswari Maddi (iCORE-CIS - iCORE-CIS) 41 Reputation points

2022-09-07T11:39:02.017+00:00

Thanks for your response. Where can i get the windows event logs data such as (Application,security,system,etc..) in Azure?
and how to export this data into ELK? Please suggest with detailed steps.
Stanislav Zhelyazkov 28,186 Reputation points MVP Volunteer Moderator

2022-09-07T12:09:55.247+00:00

Where can i get the windows event logs data such as (Application,security,system,etc..) in Azure? - I am not sure what you mean by that. Your original question was related to getting data from Log Analytics to Elastic Search. This presumes that you already are using Log Analytics. If you are not using it or you have questions towards it I would suggest to log a separate question on Q&A. The links provides already detailed steps on both configuring data export to Event Hub and configuring that plugin. You will need to try them and see if they work. Again this question is more related to Elastic Search rather Azure and would post this question on forum for that product, not in Q&A.

Share via

Azure log analytics integration with ELK

0 additional answers

Your answer