Hi,
i´m in trouble with the azure integrations in elastic. I use an elastic-agent of an own linux server to collect logs out of an azure eventhub. In discover i see any logs with the following data_stream.dataset: azure.signinlogs, azure.activitylogs, azure.events, azure.graphactivitylogs, azure.platformlogs.
So there are incoming logs as well.
When i try to observe these logs in the standard dashboards which are installed with the integration, i only see some logs
When i switch to user activiy i see nothing
Do someone have any idea what i did wrong? The connection works as you see in the first picture. i have made the configuration as described in the documentation.
kind regards