Comment on page

Azure Log Analytics

Send logs, metrics to Azure Log Analytics

Azure output plugin allows to ingest your records into Azure Log Analytics service.
To get more details about how to setup Azure Log Analytics, please refer to the following documentation: Azure Log Analytics​
Configuration Parameters
Key
Description
default
Customer_ID
Customer ID or WorkspaceID string.
​
Shared_Key
The primary or the secondary Connected Sources client authentication key.
​
Log_Type
The name of the event type.
fluentbit
Log_Type_Key
If included, the value for this key will be looked upon in the record and if present, will over-write the log_type. If not found then the log_type value will be used.
​
Time_Key
Optional parameter to specify the key name where the timestamp will be stored.
@timestamp
Time_Generated
If enabled, the HTTP request header 'time-generated-field' will be included so Azure can override the timestamp with the key specified by 'time_key' option.
off
Getting Started
In order to insert records into an Azure Log Analytics instance, you can run the plugin from the command line or through the configuration file:
Command Line
The azure plugin, can read the parameters from the command line in two ways, through the -p argument (property), e.g:
$ fluent-bit -i cpu -o azure -p customer_id=abc -p shared_key=def -m '*' -f 1
Configuration File
In your main configuration file append the following Input & Output sections:
[INPUT]
    Name  cpu
​
[OUTPUT]
    Name        azure
    Match       *
    Customer_ID abc
    Shared_Key  def
Another example using the Log_Type_Key with record-accessor, which will read the table name (or event type) dynamically from kubernetes label app, instead of Log_Type:
[INPUT]
    Name  cpu
​
[OUTPUT]
    Name        azure
    Match       *
    Log_Type_Key $kubernetes['labels']['app']
    Customer_ID abc
    Shared_Key  def

Key	Description	default
Customer_ID	Customer ID or WorkspaceID string.
Shared_Key	The primary or the secondary Connected Sources client authentication key.
Log_Type	The name of the event type.	fluentbit
Log_Type_Key	If included, the value for this key will be looked upon in the record and if present, will over-write the `log_type`. If not found then the `log_type` value will be used.
Time_Key	Optional parameter to specify the key name where the timestamp will be stored.	@timestamp
Time_Generated	If enabled, the HTTP request header 'time-generated-field' will be included so Azure can override the timestamp with the key specified by 'time_key' option.	off

Last modified 7d ago