Blob storage and Azure Data Lake Gen2 output from Azure Stream Analytics

Data Lake Storage Gen2 makes Azure Storage the foundation for building enterprise data lakes on Azure. Designed from the start to service multiple petabytes of information while sustaining hundreds of gigabits of throughput, Data Lake Storage Gen2 allows you to easily manage massive amounts of data. A fundamental part of Data Lake Storage Gen2 is the addition of a hierarchical namespace to Blob storage.

Azure Blob storage offers a cost-effective and scalable solution for storing large amounts of unstructured data in the cloud. For an introduction on Blob storage and its usage, see Upload, download, and list blobs with the Azure portal.


For details on the behaviors specific to the AVRO and Parquet formats, see the related sections in the overview.

Output configuration

The following table lists the property names and their descriptions for creating a blob or ADLS Gen2 output.

Property name Description
Output alias A friendly name used in queries to direct the query output to this blob storage.
Storage account The name of the storage account where you're sending your output.
Storage account key The secret key associated with the storage account.
Container A logical grouping for blobs stored in the Azure Blob service. When you upload a blob to the Blob service, you must specify a container for that blob.
Event serialization format Serialization format for output data. JSON, CSV, Avro, and Parquet are supported. Delta Lake is listed as an option here. The data will be in Parquet format if Delta Lake is selected. Learn more about Delta Lake
Delta path name Required when Event serialization format is Delta Lake. The path that is used to write the delta lake table within the specified container. It includes the table name. More details and examples.
Write Mode Write mode controls the way ASA writes to output file. Exactly once delivery only happens when write mode is Once. More information in the section below.
Partition Column Optional. The {field} name from your output data to partition. Only one partition column is supported.
Path pattern Required when Event serialization format is Delta lake. The file path pattern that's used to write your blobs within the specified container.

In the path pattern, you can choose to use one or more instances of the date and time variables to specify the frequency that blobs are written: {date}, {time}.

Note that if your write mode is Once, you need to use both {date} and {time}.

You can use custom blob partitioning to specify one custom {field} name from your event data to partition blobs. The field name is alphanumeric and can include spaces, hyphens, and underscores. Restrictions on custom fields include the following:
  • No dynamic custom {field} name is allowed if your write mode is Once.
  • Field names aren't case-sensitive. For example, the service can't differentiate between column "ID" and column "id."
  • Nested fields aren't permitted. Instead, use an alias in the job query to "flatten" the field.
  • Expressions can't be used as a field name.

This feature enables the use of custom date/time format specifier configurations in the path. Custom date and time formats must be specified one at a time, enclosed by the {datetime:<specifier>} keyword. Allowable inputs for <specifier> are yyyy, MM, M, dd, d, HH, H, mm, m, ss, or s. The {datetime:<specifier>} keyword can be used multiple times in the path to form custom date/time configurations.

  • Example 1: cluster1/logs/{date}/{time}
  • Example 2: cluster1/logs/{date}
  • Example 3: cluster1/{client_id}/{date}/{time}
  • Example 4: cluster1/{datetime:ss}/{myField} where the query is: SELECT data.myField AS myField FROM Input;
  • Example 5: cluster1/year={datetime:yyyy}/month={datetime:MM}/day={datetime:dd}

The time stamp of the created folder structure follows UTC and not local time. System.Timestamp is the time used for all time based partitioning.

File naming uses the following convention:

{Path Prefix Pattern}/schemaHashcode_Guid_Number.extension

Here Guid represents the unique identifier assigned to an internal writer that is created to write to a blob file. The number represents index of the blob block.

Example output files:
  • Myoutput/20170901/00/45434_gguid_1.csv
  • Myoutput/20170901/01/45434_gguid_1.csv

For more information about this feature, see Azure Stream Analytics custom blob output partitioning.
Date format Required when Event serialization format is Delta lake. If the date token is used in the prefix path, you can select the date format in which your files are organized. Example: YYYY/MM/DD
Time format Required when Event serialization format is Delta lake. If the time token is used in the prefix path, specify the time format in which your files are organized.
Minimum rows The number of minimum rows per batch. For Parquet, every batch will create a new file. The current default value is 2,000 rows and the allowed maximum is 10,000 rows.
Maximum time The maximum wait time per batch. After this time, the batch will be written to the output even if the minimum rows requirement isn't met. The current default value is 1 minute and the allowed maximum is 2 hours. If your blob output has path pattern frequency, the wait time can't be higher than the partition time range.
Encoding If you're using CSV or JSON format, an encoding must be specified. UTF-8 is the only supported encoding format at this time.
Delimiter Applicable only for CSV serialization. Stream Analytics supports a number of common delimiters for serializing CSV data. Supported values are comma, semicolon, space, tab, and vertical bar.
Format Applicable only for JSON serialization. Line separated specifies that the output is formatted by having each JSON object separated by a new line. If you select Line separated, the JSON is read one object at a time. The whole content by itself wouldn't be a valid JSON. Array specifies that the output is formatted as an array of JSON objects. This array is closed only when the job stops or Stream Analytics has moved on to the next time window. In general, it's preferable to use line-separated JSON, because it doesn't require any special handling while the output file is still being written to.

Exactly Once Delivery (Public Preview)

End-to-end exactly once delivery when reading any streaming input means that processed data will be written to Azure Data Lake Storage Gen2 output once without duplicates. When the feature is enabled, your Stream Analytics job guarantees no data loss and no duplicates being produced as output, across user-initiated restart from last output time. This greatly simplifies your streaming pipeline by not having to implement and troubleshoot deduplication logic.

Write Mode

There are two ways that Stream Analytics writes to your Blob storage or ADLS Gen2 account. One is to append results either to the same file or to a sequence of files as results are coming in. The other one is to write after all results for the time partition when all the data for the time partition is available. Exactly Once Delivery is enabled when Write Mode is Once.

There's no write mode option for Delta Lake. However Delta lake output also provides exactly once guarantees using delta log. It doesn't require time partition and would write results continuously based on the batching parameters that user defined.


If you prefer not to use the preview feature for exactly once delivery, please select Append as results arrive.


To receive exactly once delivery for your Blob storage or ADLS Gen2 account, you need to configure as below:

  • Select Once after all results of time partition is available for your Write Mode.
  • Provide Path Pattern with both {date} and {time} specified.
  • Specify date format and time format.


  • Substream isn't supported.
  • Path Pattern becomes a required property, and must contain both{date} and {time}. No dynamic custom {field} name is allowed. Learn more about custom path pattern.
  • If the job is started at a custom time before or after the last output time, there's risk of file being overwritten. For example, when the time format is HH, the file is generated every hour. If you stop the job at 8:15am, and restart the job at 8:30am, the file generated between 8am to 9am will only cover data from 8:30am to 9am. The data from 8am to 8:15am will be lost as it's overwritten.

Blob output files

When you're using Blob storage as output, a new file is created in the blob in the following cases:

  • The file exceeds the maximum number of allowed blocks (currently 50,000). You might reach the maximum allowed number of blocks without reaching the maximum allowed blob size. For example, if the output rate is high, you can see more bytes per block, and the file size is larger. If the output rate is low, each block has less data, and the file size is smaller.
  • There's a schema change in the output, and the output format requires fixed schema (CSV, Avro, Parquet).
  • A job is restarted, either externally by a user stopping it and starting it, or internally for system maintenance or error recovery.
  • Query is fully partitioned, and a new file is created for each output partition. This comes from using PARTITION BY, or the native parallelization introduced in compatibility level 1.2
  • User deletes a file or a container of the storage account.
  • Output is time partitioned by using the path prefix pattern, and a new blob is used when the query moves to the next hour.
  • Output is partitioned by a custom field, and a new blob is created per partition key if it doesn't exist.
  • Output is partitioned by a custom field where the partition key cardinality exceeds 8,000, and a new blob is created per partition key.


For partition key, use {date} and {time} tokens from your event fields in the path pattern. Choose the date format, such as YYYY/MM/DD, DD/MM/YYYY, or MM-DD-YYYY. HH is used for the time format. Blob output can be partitioned by a single custom event attribute {fieldname} or {datetime:<specifier>}. The number of output writers follows the input partitioning for fully parallelizable queries.

Output batch size

For the maximum message size, see Azure Storage limits. The maximum blob block size is 4 MB and the maximum blob bock count is 50,000.


  • If a forward slash symbol / is used in the path pattern (e.g /folder2/folder3), then empty folders will be created and they won't be visible in Storage Explorer
  • Azure Stream Analytics appends to the same file in cases where a new blob file isn't needed. Note that this could cause additional triggers to be generated if Azure services like Event Grid are configured to be triggered on blob file update
  • Azure Stream Analytics appends to blob by default. When the output format is a Json array, it completes the file on shutdown or when the output moves to the next time partition for time partitioned outputs. In some cases such as an unclean restart, it's possible that the closing "]" for json array may be missing.

Next steps