# Azure Logs integration stops pulling events

**URL:** <https://discuss.elastic.co/t/azure-logs-integration-stops-pulling-events/364891>\
**Category:** Elastic Security\
**Created:** [August 14, 2024, 7:37am UTC](https://discuss.elastic.co/t/azure-logs-integration-stops-pulling-events/364891 "2024-08-14T07:37:32Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![isever24](https://avatars.discourse-cdn.com/v4/letter/i/e95f7d/32.png) [@isever24](https://discuss.elastic.co/u/isever24)\
**Post date:** [August 14, 2024, 7:37am UTC](https://discuss.elastic.co/t/azure-logs-integration-stops-pulling-events/364891/1 "2024-08-14T07:37:32Z")

</div>

Hello,

We are pulling Azure Entra signin events through Azure event hub.  
It works for few days and then it stops working and we need to restart Elastic agent.  
Error is:

50]: 2024/08/13 22:23:58 ==\> REQUEST/RESPONSE (Try=1/16.902µs, OpTime=89.913µs) -- REQUEST ERROR  
PUT hxxps://xxxxxxxxxxxxxxxxxxxx.blob.core.windows.net/filebeat-signinlogs-entraidlogs/0?comp=lease&timeout=1  
Authorization: REDACTED  
User-Agent: [Azure-Storage/0.15 (go1.22.5; linux)]  
X-Ms-Client-Request-Id: [1c81133b-0d8d-46dc-4dfb-a3dec2dd19b0]  
X-Ms-Lease-Action: [release]  
X-Ms-Lease-Id: [ccf5ec09-5689-4b55-bd16-42a75c81fd76]  
X-Ms-Version: [2018-11-09]  
x-ms-date: [Tue, 13 Aug 2024 20:23:58 GMT]  
--------------------------------------------------------------------------------  
ERROR:  
-\> [github.com/Azure/azure-pipeline-go/pipeline.NewError](http://github.com/Azure/azure-pipeline-go/pipeline.NewError), [github.com/Azure/azure-pipeline-go@v0.2.3/pipeline/error.go:157](http://github.com/Azure/azure-pipeline-go@v0.2.3/pipeline/error.go:157)  
HTTP request failed

```
 Put "hxxps://xxxxxxxxxxxxxxxxxxxx.blob.core.windows.net/filebeat-signinlogs-entraidlogs/0?comp=lease&timeout=1": context deadline exceeded

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 11, 2024, 7:38am UTC](https://discuss.elastic.co/t/azure-logs-integration-stops-pulling-events/364891/2 "2024-09-11T07:38:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
