Azure Logs integration stops pulling events

Hello,

We are pulling Azure Entra signin events through Azure event hub.
It works for few days and then it stops working and we need to restart Elastic agent.
Error is:

50]: 2024/08/13 22:23:58 ==> REQUEST/RESPONSE (Try=1/16.902µs, OpTime=89.913µs) -- REQUEST ERROR
PUT hxxps://xxxxxxxxxxxxxxxxxxxx.blob.core.windows.net/filebeat-signinlogs-entraidlogs/0?comp=lease&timeout=1
Authorization: REDACTED
User-Agent: [Azure-Storage/0.15 (go1.22.5; linux)]
X-Ms-Client-Request-Id: [1c81133b-0d8d-46dc-4dfb-a3dec2dd19b0]
X-Ms-Lease-Action: [release]
X-Ms-Lease-Id: [ccf5ec09-5689-4b55-bd16-42a75c81fd76]
X-Ms-Version: [2018-11-09]
x-ms-date: [Tue, 13 Aug 2024 20:23:58 GMT]
--------------------------------------------------------------------------------
ERROR:
-> github.com/Azure/azure-pipeline-go/pipeline.NewError, github.com/Azure/azure-pipeline-go@v0.2.3/pipeline/error.go:157
HTTP request failed

 Put "hxxps://xxxxxxxxxxxxxxxxxxxx.blob.core.windows.net/filebeat-signinlogs-entraidlogs/0?comp=lease&timeout=1": context deadline exceeded
1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.