# ELK plugin for Azure eventhub

**URL:** <https://discuss.elastic.co/t/elk-plugin-for-azure-eventhub/77756>\
**Category:** Logstash\
**Created:** [March 8, 2017, 4:51am UTC](https://discuss.elastic.co/t/elk-plugin-for-azure-eventhub/77756 "2017-03-08T04:51:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [March 8, 2017, 4:51am UTC](https://discuss.elastic.co/t/elk-plugin-for-azure-eventhub/77756/1 "2017-03-08T04:51:06Z")

</div>

Hello again , guys.  
I am still trying setup windows azure logs parsing in ELK. Still no luck. Tried azureblob plugin, and exec command variant. Both work with issues. Found 3-d variant, ( an article) that it can be done "quite easily" with Azure event hub.

> **[Azure/azure-diagnostics-tools](https://github.com/Azure/azure-diagnostics-tools/tree/master/Logstash/logstash-input-azureeventhub)**
>
> azure-diagnostics-tools - Plugins and tools for collecting, processing, managing, and visualizing diagnostics data and configuration

  
I have already installed this plugin but faced with next error:

Do you know how to fix it? I have already opened default port on firewall but it does not help to solve an issue.

[2017-03-08T04:40:36,882][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=\>9600}  
java.net.SocketException: Unrecognized Windows Sockets error: 0: recv failed  
at java.net.SocketInputStream.socketRead0(Native Method)  
at java.net.SocketInputStream.socketRead(Unknown Source)  
at java.net.SocketInputStream.read(Unknown Source)  
at java.net.SocketInputStream.read(Unknown Source)  
at sun.security.ssl.InputRecord.readFully(Unknown Source)  
at sun.security.ssl.InputRecord.read(Unknown Source)  
at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)  
at sun.security.ssl.SSLSocketImpl.readDataRecord(Unknown Source)  
at sun.security.ssl.AppInputStream.read(Unknown Source)  
at java.io.InputStream.read(Unknown Source)  
at org.apache.qpid.amqp\_1\_0.client.TCPTransportProvider.doRead(TCPTransportProvider.java:234)  
at org.apache.qpid.amqp\_1\_0.client.TCPTransportProvider.access$000(TCPTransportProvider.java:47)  
at org.apache.qpid.amqp\_1\_0.client.TCPTransportProvider$1.run(TCPTransportProvider.java:185)  
at java.lang.Thread.run(Unknown Source)

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [March 8, 2017, 10:19pm UTC](https://discuss.elastic.co/t/elk-plugin-for-azure-eventhub/77756/2 "2017-03-08T22:19:25Z")

</div>

java.net.SocketException: Connection reset  
at java.net.SocketInputStream.read(Unknown Source)  
at java.net.SocketInputStream.read(Unknown Source)  
at sun.security.ssl.InputRecord.readFully(Unknown Source)  
at sun.security.ssl.InputRecord.read(Unknown Source)  
at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)  
at sun.security.ssl.SSLSocketImpl.readDataRecord(Unknown Source)  
at sun.security.ssl.AppInputStream.read(Unknown Source)  
at java.io.InputStream.read(Unknown Source)  
at org.apache.qpid.amqp\_1\_0.client.TCPTransportProvider.doRead(TCPTransportProvider.java:234)  
at org.apache.qpid.amqp\_1\_0.client.TCPTransportProvider.access$000(TCPTransportProvider.java:47)  
at org.apache.qpid.amqp\_1\_0.client.TCPTransportProvider$1.run(TCPTransportProvider.java:185)  
at java.lang.Thread.run(Unknown Source)

---

<div class="post-metadata">

**Author:** ![111148](https://avatars.discourse-cdn.com/v4/letter/1/eb8c5e/32.png) [@111148](https://discuss.elastic.co/u/111148)\
**Post date:** [March 8, 2017, 10:21pm UTC](https://discuss.elastic.co/t/elk-plugin-for-azure-eventhub/77756/3 "2017-03-08T22:21:02Z")

</div>

How do you think could it be related with this? [http://stackoverflow.com/questions/5507878/ssl-connection-reset/5508435#5508435](http://stackoverflow.com/questions/5507878/ssl-connection-reset/5508435#5508435)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 5, 2017, 10:21pm UTC](https://discuss.elastic.co/t/elk-plugin-for-azure-eventhub/77756/4 "2017-04-05T22:21:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.