elastic / elastic/integrations

[Azure Logs]: (azure) add OAuth2 support and make endpoint params configurable

Open
#16,408 0 comments 1 reaction 0 assignees View on GitHub
enhancement Integration:azure needs:triage Team:obs-ds-hosted-services
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

### Integration Name

Azure Logs [azure]

### Dataset Name

_No response_

### Integration Version

1.30.0

### Agent Version

9.2.1

### OS Version and Architecture

Debian

### User Goal

Configure the integration to work with Microsoft Entra ID (OAuth 2), Microsoft's Partner Center, and its granular delegated admin privileges ([GDAP](https://learn.microsoft.com/en-us/partner-center/customers/gdap-introduction)) constructs to authorize and collect tenant information.

### Existing Features

Similar to the work we did with other integrations, we need to add OAuth2 support so it will work with Microsoft Entra ID.

Similar to work we previously did for both Microsoft Office 365 (https://github.com/elastic/integrations/pull/14924) and Microsoft Defender Endpoint (https://github.com/elastic/integrations/issues/15605), we need to expose the "OAuth2 Endpoint Params" via the integration to allow users to modify the grant_type and the refresh_token value.

### What did you see?

This integrations options: https://www.elastic.co/docs/reference/integrations/azure (v1 input) and https://www.elastic.co/docs/reference/integrations/azure/events (v2 input).

The https://learn.microsoft.com/en-us/azure/event-hubs/authenticate-application mentions that Azure Event Hubs work with OAuth2 / Microsoft Entra ID.

The other integration options:

https://www.elastic.co/docs/reference/integrations/o365
https://www.elastic.co/docs/reference/integrations/microsoft_defender_endpoint

### Anything else?

Similar to https://github.com/elastic/integrations/issues/15605, https://github.com/elastic/integrations/pull/14924, https://github.com/elastic/integrations/issues/16134, and https://github.com/elastic/integrations/issues/16135.

Depends on https://github.com/elastic/beats/pull/47256.
Depends on https://github.com/elastic/beats/issues/48479.
Relates to #16586 and #17030.

Note within Kibana UI v9.2.1, Azure Logs, Azure Logs (v2 preview), and Azure Event Hub Input all use this same integration and version but different options are displayed within the UI.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.