Skip to content

Conversation

@zmoog
Copy link
Contributor

@zmoog zmoog commented Jan 14, 2026

Proposed commit message

Add the new Event Hubs transport config option that supports AMQP and AMQP-over-Websockets protocols.

The AMQP-over-Websockets protocol allows reaching Event Hubs on the 443 (HTTPS) port, making the integration available in network environment with restrictions. When AMQP-over-Websockets is selected, users can also route traffic through a proxy by setting the HTTPS_PROXY environment variable.

The Event Hubs transport config option requires stack versions 8.19.10, 9.1.10 and 9.2.4.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

How to test this PR locally

Related issues

Screenshots

UI

CleanShot 2026-01-14 at 13 27 25@2x

Docs

CleanShot 2026-01-16 at 18 26 07@2x

Supports `amqp` and `websocket` options, and allow using proxy when
the `websocket` transport is selected.
@zmoog zmoog self-assigned this Jan 14, 2026
@zmoog zmoog added Integration:azure Azure Logs Team:Obs-InfraObs Observability Infrastructure Monitoring team [elastic/obs-infraobs-integrations] Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Team:obs-ds-hosted-services Observability Hosted Services team [elastic/obs-ds-hosted-services] labels Jan 14, 2026
@zmoog zmoog changed the title [azure logs] Add transport config option [azure logs] Add AMQP-over-Websockets and proxy support Jan 14, 2026
@zmoog zmoog marked this pull request as ready for review January 14, 2026 12:31
@zmoog zmoog requested review from a team as code owners January 14, 2026 12:31
@elasticmachine
Copy link

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@zmoog
Copy link
Contributor Author

zmoog commented Jan 14, 2026

@lucabelluccini, this PR adds AMQP-over-WebSockets and proxy support to the Azure Logs integration.

I've updated the docs, but I'm not entirely happy with how they turned out. I'd love your input on what users would expect to see here to find out that the integration now supports AMQP-over-WebSockets and proxying.

@elastic-vault-github-plugin-prod

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Jan 14, 2026
@lucabelluccini
Copy link
Contributor

Thank you @zmoog !

I think we should highlight:

  • It requires to set v2 (on top of setting the protocol to AMQP over Websockets)
  • It requires a minimum set of EA version (I would add the min version in the docs)
  • I would specify the ports to be open must be allowed for initiating outgoing TCP connections (the integration acts as a client, not as a server - correct me if I'm wrong)

Copy link
Contributor

@Kavindu-Dodan Kavindu-Dodan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Contributor

@muthu-mps muthu-mps left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Copy link
Contributor

@lucabelluccini lucabelluccini left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've left a comment to clarify the support for this.

@zmoog
Copy link
Contributor Author

zmoog commented Jan 16, 2026

I think we should highlight:

  • It requires to set v2 (on top of setting the protocol to AMQP over Websockets)
  • It requires a minimum set of EA version (I would add the min version in the docs)
  • I would specify the ports to be open must be allowed for initiating outgoing TCP connections (the integration acts as a client, not as a server - correct me if I'm wrong)

On it!

zmoog and others added 2 commits January 16, 2026 16:48
Co-authored-by: Luca Belluccini <luca.belluccini@elastic.co>
Changes:

- Clarify processor v2 is required for websockets and proxy
- Clarify minimum set of EA version (I would add the min version in the docs)
- Highlight outbound connections
@elasticmachine
Copy link

💚 Build Succeeded

History

cc @zmoog

@zmoog
Copy link
Contributor Author

zmoog commented Jan 16, 2026

@lucabelluccini, we updated the docs, please take a look when you have time.

@zmoog zmoog requested a review from lucabelluccini January 16, 2026 16:36
Copy link
Contributor

@lucabelluccini lucabelluccini left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM ❤️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. Integration:azure Azure Logs Team:obs-ds-hosted-services Observability Hosted Services team [elastic/obs-ds-hosted-services] Team:Obs-InfraObs Observability Infrastructure Monitoring team [elastic/obs-infraobs-integrations] Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Azure Logs] Add support for AMQP-over-websocket and HTTP proxy

8 participants