# Using Azure integration without Azure storage

**URL:** <https://discuss.elastic.co/t/using-azure-integration-without-azure-storage/363848>\
**Category:** Elastic Agent\
**Created:** [July 26, 2024, 9:34am UTC](https://discuss.elastic.co/t/using-azure-integration-without-azure-storage/363848 "2024-07-26T09:34:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rihards](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rihards/32/136322_2.png) [@Rihards](https://discuss.elastic.co/u/Rihards)\
**Post date:** [July 26, 2024, 9:34am UTC](https://discuss.elastic.co/t/using-azure-integration-without-azure-storage/363848/1 "2024-07-26T09:34:10Z")

</div>

As per [Azure Logs | Documentation](https://www.elastic.co/docs/current/integrations/azure) , setting up Azure integration requires Azure storage for state registry to share it between agents.  
Is it possible to skip Azure storage and use local state registry (single agent or shared storage)?

Rationale: state registry is a low-volume, high rate usecase. This both makes agent increasingly reliant on low latency, and increases storage expenses.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [July 26, 2024, 12:34pm UTC](https://discuss.elastic.co/t/using-azure-integration-without-azure-storage/363848/2 "2024-07-26T12:34:52Z")

</div>

Hello and welcome,

> [@Rihards](#):
>
> Is it possible to skip Azure storage and use local state registry (single agent or shared storage)?

No, it is not possible, the storage account is a required configuration, you cannot add the integration without configuring it.

But one alternative would be to try to use Logstash to get the logs using the Kafka interface of the Event Hubs, split the `records` and then send it back to Elasticsearch configuring to use the ingest pipeline of each dataset.

One big issue here is that azure logs are all in a array named `records`, the eventhub integration get those logs and split this array into one event per item, you cannot do that with any other Elastic Agent input or Ingest pipeline processor, so this requires Logstash.

---

<div class="post-metadata">

**Author:** ![Rihards](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rihards/32/136322_2.png) [@Rihards](https://discuss.elastic.co/u/Rihards)\
**Post date:** [August 8, 2024, 8:04am UTC](https://discuss.elastic.co/t/using-azure-integration-without-azure-storage/363848/3 "2024-08-08T08:04:39Z")

</div>

Thanks, that sounds very interesting, but potentially fairly complex in the end.  
I guess Azure storage usage isn't a technical limitation - as this is already passing through Elastic Agent, theoretically it could use local storage, right?