elastic / elastic/integrations
[Azure Logs]: (azure) add OAuth2 support and make endpoint params configurable
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 3d 4h
- Merged PRs (30d)
- 209
Description
### Integration Name
Azure Logs [azure]
### Dataset Name
_No response_
### Integration Version
1.30.0
### Agent Version
9.2.1
### OS Version and Architecture
Debian
### User Goal
Configure the integration to work with Microsoft Entra ID (OAuth 2), Microsoft's Partner Center, and its granular delegated admin privileges ([GDAP](https://learn.microsoft.com/en-us/partner-center/customers/gdap-introduction)) constructs to authorize and collect tenant information.
### Existing Features
Similar to the work we did with other integrations, we need to add OAuth2 support so it will work with Microsoft Entra ID.
Similar to work we previously did for both Microsoft Office 365 (https://github.com/elastic/integrations/pull/14924) and Microsoft Defender Endpoint (https://github.com/elastic/integrations/issues/15605), we need to expose the "OAuth2 Endpoint Params" via the integration to allow users to modify the grant_type and the refresh_token value.
### What did you see?
This integrations options: https://www.elastic.co/docs/reference/integrations/azure (v1 input) and https://www.elastic.co/docs/reference/integrations/azure/events (v2 input).
The https://learn.microsoft.com/en-us/azure/event-hubs/authenticate-application mentions that Azure Event Hubs work with OAuth2 / Microsoft Entra ID.
The other integration options:
https://www.elastic.co/docs/reference/integrations/o365
https://www.elastic.co/docs/reference/integrations/microsoft_defender_endpoint
### Anything else?
Similar to https://github.com/elastic/integrations/issues/15605, https://github.com/elastic/integrations/pull/14924, https://github.com/elastic/integrations/issues/16134, and https://github.com/elastic/integrations/issues/16135.
Depends on https://github.com/elastic/beats/pull/47256.
Depends on https://github.com/elastic/beats/issues/48479.
Relates to #16586 and #17030.
Note within Kibana UI v9.2.1, Azure Logs, Azure Logs (v2 preview), and Azure Event Hub Input all use this same integration and version but different options are displayed within the UI.
Contributor guide
Assessment
This issue has not been assessed yet.