I am trying to capture audit logs from 2 event hubs but there is data loss or some time not getting the audit logs. I am using below input configuration

input
	{
		azure_event_hubs 
				{
					config_mode => "basic"
					#Insert primary connection string from shared access policies in event hub namespace from azure portal
					event_hub_connections => ["<Shared Acess Policy 1>;EntityPath=<eventhubname1>","<Shared Acess Policy 2>;EntityPath=<eventhubname2>"]
					initial_position => "end"
					threads => 16
					decorate_events => true
					consumer_group => "Consumer group name"
					type => "<type name>"    
				}
	}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.