Azure Log Analytics

Send logs, metrics to Azure Log Analytics

Azure output plugin allows to ingest your records into Azure Log Analytics service.

To get more details about how to setup Azure Log Analytics, please refer to the following documentation: Azure Log Analytics

Configuration Parameters

Key	Description	default
Customer_ID	Customer ID or WorkspaceID string.
Shared_Key	The primary or the secondary Connected Sources client authentication key.
Log_Type	The name of the event type.	fluentbit
Log_Type_Key	If included, the value for this key will be looked upon in the record and if present, will over-write the log_type. If not found then the log_type value will be used.
Time_Key	Optional parameter to specify the key name where the timestamp will be stored.	@timestamp
Time_Generated	If enabled, the HTTP request header 'time-generated-field' will be included so Azure can override the timestamp with the key specified by 'time_key' option.	off

Getting Started

In order to insert records into an Azure Log Analytics instance, you can run the plugin from the command line or through the configuration file:

Command Line

The azure plugin, can read the parameters from the command line in two ways, through the -p argument (property), e.g:

$ fluent-bit -i cpu -o azure -p customer_id=abc -p shared_key=def -m '*' -f 1

Configuration File

In your main configuration file append the following Input & Output sections:

[INPUT]
    Name  cpu

[OUTPUT]
    Name        azure
    Match       *
    Customer_ID abc
    Shared_Key  def

Another example using the Log_Type_Key with record-accessor, which will read the table name (or event type) dynamically from kubernetes label app, instead of Log_Type:

[INPUT]
    Name  cpu

[OUTPUT]
    Name        azure
    Match       *
    Log_Type_Key $kubernetes['labels']['app']
    Customer_ID abc
    Shared_Key  def