You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: Elastic integration with Azure frequently asked questions
4
+
description: Answers to common questions about using Elastic Cloud (Elasticsearch), Elastic Observability, and Elastic Security in Azure.
5
+
ms.topic: faq
6
+
ai-usage: ai-generated
7
+
ms.date: 12/17/2025
8
+
9
+
title: Elastic integration with Azure FAQ
10
+
summary: |
11
+
12
+
sections:
13
+
- name: General
14
+
questions:
15
+
- question: What is Elastic in Azure?
16
+
answer: |
17
+
Elastic in Azure is a set of managed services that deliver search, log analytics, and security monitoring functions for Azure environments. Microsoft and Elastic developed these services and manage them together. The three services are:
18
+
- **Elastic Cloud (Elasticsearch):** A managed Elasticsearch service for storing, searching, and analyzing structured and unstructured data.
19
+
- **Elastic Observability:** Collects and analyzes telemetry data (logs, metrics, traces) to monitor the performance and health of applications and infrastructure.
20
+
- **Elastic Security:** Collects and analyzes security-related data to support threat detection, investigation, and response across Azure resources.
21
+
- question: How do I subscribe to Elastic?
22
+
answer: |
23
+
You can subscribe to Elastic through Azure Marketplace. Choose from three offerings:
You can also subscribe directly from the Azure portal when creating a new Elastic resource.
29
+
- question: What are the differences between Serverless and Cloud Hosted deployment options?
30
+
answer: |
31
+
Elastic resources are available as Serverless and Cloud Hosted:
32
+
- **Serverless:** Usage-based scaling with automatic infrastructure management. Available for Elastic Search, Elastic Observability, and Elastic Security.
33
+
- **Cloud Hosted:** Dedicated, managed clusters with configurable versions and sizes. Provides more control over deployment specifications.
34
+
35
+
For more information, see [Compare Elastic Cloud Hosted and Serverless](https://www.elastic.co/docs/deploy-manage/deploy/elastic-cloud/differences-from-other-elasticsearch-offerings).
36
+
- question: Where can I learn more about Elastic integration with Azure?
37
+
answer: |
38
+
For more help using the Elastic service, see the [Elastic documentation](https://www.elastic.co/guide/en/cloud/current/ec-azure-marketplace-native.html) for Azure integration.
39
+
- name: Authentication and access
40
+
questions:
41
+
- question: Is single sign-on (SSO) supported?
42
+
answer: |
43
+
Yes. The ability to automatically navigate between the Azure portal and Elastic Cloud is enabled by using single sign-on (SSO). This option is automatically enabled and turned on for all Azure users.
44
+
- question: What permissions do I need to create an Elastic resource?
45
+
answer: |
46
+
You must have *Owner* or *Contributor* access on the Azure subscription to create an Elastic resource. If you're unable to create a resource, confirm that you have the appropriate access.
47
+
- name: Monitoring and logs
48
+
questions:
49
+
- question: Can I send Azure logs and metrics to Elastic?
50
+
answer: |
51
+
Yes. You can configure resources to send metrics and logs to Elastic during resource creation or afterward. Select **Send subscription activity logs** and **Send Azure resource logs for all defined sources** in the **Logs & metrics** tab. You can reconfigure these settings anytime by selecting **Elastic deployment configuration** > **Logs & metrics** in the Azure portal.
52
+
- question: Why are my logs not being emitted to Elastic?
53
+
answer: |
54
+
Common reasons include:
55
+
- Only resources listed in [Azure Monitor resource log categories](/azure/azure-monitor/essentials/resource-logs-categories) emit logs to Elastic.
56
+
- The resource doesn't support sending logs. Only resource types with monitoring log categories can be configured.
57
+
- The resource reached the limit of five diagnostic settings.
58
+
- A delete lock is applied to the resource or resource group, preventing diagnostic setting cleanup.
59
+
- Export of metrics data isn't currently supported by partner solutions under Azure Monitor diagnostic settings.
60
+
- question: Can I monitor multiple Azure subscriptions with one Elastic resource?
2. Select **Add subscriptions** from the command bar.
65
+
3. Select the subscriptions you want to monitor and select **Add**.
66
+
67
+
You must have *Owner* role assigned to the subscriptions you want to add.
68
+
- question: How do I monitor Azure virtual machines with Elastic agents?
69
+
answer: |
70
+
You can install Elastic agents on virtual machines by selecting **Elastic deployment configuration** > **Virtual machines** in the service menu, then following the installation instructions.
71
+
- name: Integration and configuration
72
+
questions:
73
+
- question: Can I integrate Azure OpenAI with Elastic?
3. Select your preferred **Azure OpenAI Resource** and **Azure OpenAI Deployment**.
79
+
4. Select **Create**.
80
+
81
+
After the connector is created, navigate to Kibana. Your connector can be used in Elastic's Observability AI Assistant. Currently, Elastic resources support only deployments of text or chat completion models, like GPT-4.
82
+
- question: What are traffic filters and how do I use them?
83
+
answer: |
84
+
Traffic filters allow you to control network access to your Elastic deployment. To create a traffic filter:
The traffic filter must be in the same region as the deployment. If a traffic filter is no longer needed, unlink it from deployment and then delete it.
91
+
- name: Billing and resources
92
+
questions:
93
+
- question: How is Elastic billed in Azure?
94
+
answer: |
95
+
A single Azure Marketplace SaaS unifies billing for multiple Elastic deployments.
96
+
- question: How do I delete an Elastic resource?
97
+
answer: |
98
+
To delete all linked Elastic deployments and serverless projects created from the Azure portal and the Elastic console, follow the standard Azure resource deletion process. If you wish to completely stop billing for the marketplace SaaS, delete all linked Elastic deployments created from the Azure portal or Elastic portal.
99
+
- question: Can I view all my connected Elastic resources in one place?
100
+
answer: |
101
+
Yes. To access all Elastic resources and deployments you created using the Azure or Elastic portal, go to the **Connected Elastic Resources** tab in any of your Azure Elastic resources. You can easily manage the corresponding Elastic deployments or Azure resources using the links, provided you have owner or contributor rights.
102
+
- name: Troubleshooting
103
+
questions:
104
+
- question: What should I do if I encounter marketplace purchase errors?
105
+
answer: |
106
+
Common marketplace purchase errors and their resolutions are documented in the troubleshooting guide. Verify your subscription permissions and ensure you have the necessary access to complete the purchase.
107
+
- question: How can I suggest a new feature for Elastic integration with Azure?
108
+
answer: |
109
+
Select the **Suggest a feature** link at the top of the resource overview page in the Azure portal. This link takes you to the **Developer community forum** where you can suggest new features, view, upvote, or comment on feature suggestions from other customers.
110
+
- question: Where can I get more support?
111
+
answer: |
112
+
For more help:
113
+
- Review the [Elastic documentation](https://www.elastic.co/guide/en/cloud/current/ec-azure-marketplace-native.html) for Azure integration.
114
+
- Check the [troubleshooting guide](troubleshoot.md) for common issues and solutions.
115
+
- Contact support through the Azure portal or [Elastic support channels](https://support.elastic.co/home).
0 commit comments