Application Insights Integration No Data

Elastic Stack Kibana
1

Hey there,

Recently I have set up an ELK stack on my server and having a great time with some integrations. Now the company I work for is using application insights in azure and I saw that there was an integration for this as well. But upon trying it i don’t seem to get any information in there.

I created some API keys in azure application insights and I can query the data just fine when using a command such as curl -X GET -H "x-api-key: key" "https://``api.applicationinsights.io/v1/apps/app_id/query?query=availabilityResults%20|%20take%205&timespan=PT24H``" in the terminal. I used the application id and API key during the setup for the integration and added the agent by installing it on my windows computer.

It mentioned that incoming data has been confirmed, but when I clicked further I see no data and only errors mentioning “Could not locate field: azure.application_id, azure.app_state.users_count.unique, etc”

I saw that these API keys won’t work after march 2026 anymore but I would still like to know how I can get the application insights integration to work.

2

Hi there! This is indeed a classic point of confusion!

The issue here is that there is a mismatch of data formats. This command uses the Application Insights query API, which returns data in a specific JSON format - extracted analyzed data. So you’re receiving the data just fine when you run this command, which means you’re succesfully grabbing the Application Insight’s own JSON query format.

However, the Elastic Agent integration is designed to pull in data from Azure’s monitoring backend, which is a slightly different data source with a different JSON structure. The fact that it can’t find the expected fields of azure.application_id is showing that it is looking for the raw schema, not the analyzed and extracted one.

You’ll need to connect the Azure API itself with the integration through authentication to call management APIs (which usually involves creating an app registration in Entra ID, granting it the Monitoring Reader role, and then use the application ID + tenant ID + client secret for the integration). Here’s a link to the docs that might help you in the right direction → Azure Application Insights Integration | Elastic integrations