Hello,
We are pulling Azure Entra signin events through Azure event hub.
It works for few days and then it stops working and we need to restart Elastic agent.
Error is:
50]: 2024/08/13 22:23:58 ==> REQUEST/RESPONSE (Try=1/16.902µs, OpTime=89.913µs) -- REQUEST ERROR
PUT hxxps://xxxxxxxxxxxxxxxxxxxx.blob.core.windows.net/filebeat-signinlogs-entraidlogs/0?comp=lease&timeout=1
Authorization: REDACTED
User-Agent: [Azure-Storage/0.15 (go1.22.5; linux)]
X-Ms-Client-Request-Id: [1c81133b-0d8d-46dc-4dfb-a3dec2dd19b0]
X-Ms-Lease-Action: [release]
X-Ms-Lease-Id: [ccf5ec09-5689-4b55-bd16-42a75c81fd76]
X-Ms-Version: [2018-11-09]
x-ms-date: [Tue, 13 Aug 2024 20:23:58 GMT]
--------------------------------------------------------------------------------
ERROR:
-> github.com/Azure/azure-pipeline-go/pipeline.NewError, github.com/Azure/azure-pipeline-go@v0.2.3/pipeline/error.go:157
HTTP request failed
Put "hxxps://xxxxxxxxxxxxxxxxxxxx.blob.core.windows.net/filebeat-signinlogs-entraidlogs/0?comp=lease&timeout=1": context deadline exceeded