# Filebeat azure module multiple eventhubs in self managed elastic version 8.6.1

**URL:** https://discuss.elastic.co/t/filebeat-azure-module-multiple-eventhubs-in-self-managed-elastic-version-8-6-1/325455
**Category:** Beats
**Tags:** filebeat
**Created:** [February 14, 2023, 9:34am UTC](https://discuss.elastic.co/t/filebeat-azure-module-multiple-eventhubs-in-self-managed-elastic-version-8-6-1/325455 "2023-02-14T09:34:10Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Dov\_Zelinger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dov_zelinger/32/117216_2.png) [@Dov\_Zelinger](https://discuss.elastic.co/u/Dov_Zelinger)
#### Post date: [February 14, 2023, 9:34am UTC](https://discuss.elastic.co/t/filebeat-azure-module-multiple-eventhubs-in-self-managed-elastic-version-8-6-1/325455/1 "2023-02-14T09:34:10Z")

</div>

Hi,

As written in the below link, the issue was resolved.  
[multiple-event-hubs](https://discuss.elastic.co/t/azure-module-multiple-event-hubs/303850/10)  
Unfortunately, the issue still exists.  
When configuring multiple platformlogs as can be seen below, only one of them gets active and that will be the last one.  
I have 36 EventHubs i need to connect to (one eventhub per each azure region).

What is the exact configuration syntax to achieve that?

```auto
  platformlogs:
    enabled: true
    var:
      eventhub: ""
      consumer_group: "elk"
      connection_string: ""
      storage_account: "elkcheckpoint"
      storage_account_key: ""
      storage_account_container: ""

  platformlogs:
    enabled: true
    var:
      eventhub: ""
      consumer_group: "elk"
      connection_string: ""
      storage_account: "elkcheckpoint"
      storage_account_key: ""

```

Reagrds,  
Dov Zelinger

---

<div class="post-metadata">

### Author: ![zmoog](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zmoog/32/103218_2.png) [@zmoog](https://discuss.elastic.co/u/zmoog)
#### Post date: [February 20, 2023, 10:19pm UTC](https://discuss.elastic.co/t/filebeat-azure-module-multiple-eventhubs-in-self-managed-elastic-version-8-6-1/325455/2 "2023-02-20T22:19:30Z")

</div>

Hey @Dov_Zelinger,

I guess we need to define multiple modules, for example:

```yaml
# Module: azure
# Docs: https://www.elastic.co/guide/en/beats/filebeat/main/filebeat-module-azure.html

- module: azure
  signinlogs:
    enabled: true
    var:
      eventhub: ".."
      consumer_group: ".."
      connection_string: ".."
      storage_account: ".."
      storage_account_key: ".."

- module: azure
  signinlogs:
    enabled: true
    var:
      eventhub: ""
      consumer_group: ""
      connection_string: ""
      storage_account: ""
      storage_account_key: ""

```

I ran a quick test, and with this configuration, I can spot two `azure-eventhub` inputs starting in the logs.

Let me know if it works for your use case.

--  
Maurizio

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 21, 2023, 12:20am UTC](https://discuss.elastic.co/t/filebeat-azure-module-multiple-eventhubs-in-self-managed-elastic-version-8-6-1/325455/3 "2023-03-21T00:20:29Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.