# Azure Frontdoor integration

**URL:** <https://discuss.elastic.co/t/azure-frontdoor-integration/370075>\
**Category:** Elastic Agent\
**Created:** [November 5, 2024, 2:35pm UTC](https://discuss.elastic.co/t/azure-frontdoor-integration/370075 "2024-11-05T14:35:41Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![juancamiloll](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juancamiloll/32/110326_2.png) [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Post date:** [November 5, 2024, 2:35pm UTC](https://discuss.elastic.co/t/azure-frontdoor-integration/370075/1 "2024-11-05T14:35:41Z")

</div>

Hello everyone,

I need to receive logs “ **Azure Frontdoor** ” I see that there is an integration that allows to do this but I have no idea what are the values of the fields that are required as I am not the Azure administrator.

Clearly I should make the request to the Azure administrator but I would like to be very specific with what I am going to request and if possible, I would appreciate if you could help me to understand and where to find the values needed for each field.

What I have researched I have found the following but I don't know if it is correct

**Eventhub:** found by logging into the azure resource called “Event Hubs” and in the menu “Entities” -\> “Event Hubs”.

**Connection string** : I think this is clear according to microsoft documentation [Get connection string - Azure Event Hubs | Microsoft Learn](https://learn.microsoft.com/en-us/azure/event-hubs/event-hubs-get-connection-string#azure-portal)

**Storage Account** : In the resource called “Storage Account”.

**Storage Account Key** : I think it is in the resource “Storage Account” -\> Menu “Security and Networks” and “Access keys”.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/7/67b22b539da446f92df5a0c884e6acb46dfcd1e3.png)

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [November 5, 2024, 2:41pm UTC](https://discuss.elastic.co/t/azure-frontdoor-integration/370075/2 "2024-11-05T14:41:41Z")

</div>

> [@juancamiloll](#):
>
> I would appreciate if you could help me to understand and where to find the values needed for each field.

You need to create the resources.

Basically you need to configure Azure Frontdoor to send the logs to an Event Hub, this documentation explains how: [Configure Azure Front Door logs | Microsoft Learn](https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-logs)

Your Azure admin will need to create the Event Hub and the Storage Account, then you get the names of the created resources and configure the integration.

---

<div class="post-metadata">

**Author:** ![juancamiloll](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/juancamiloll/32/110326_2.png) [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\
**Post date:** [November 5, 2024, 3:20pm UTC](https://discuss.elastic.co/t/azure-frontdoor-integration/370075/3 "2024-11-05T15:20:39Z")

</div>

@leandrojmp thank you for your valuable help, I will proceed to make the request to the Azure administrator.

One last question: At the end it asks for a policy obviously this is not host focused, so should I associate this integration to the policy for the fleet server?

Note: The architecture is like this  
Fleet Server  
Elasticsearch Cluster [3 servers].  
Kibana Server  
Logstas Server

Tnx

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [November 5, 2024, 5:02pm UTC](https://discuss.elastic.co/t/azure-frontdoor-integration/370075/4 "2024-11-05T17:02:59Z")

</div>

> [@juancamiloll](#):
>
> I associate this integration to the policy for the fleet server?

I would say that is better to have a server to run agents like this.

Or you may install it in a policy for the agent on the Logstash server.
