Skip to main content

How to Integrate Azure Event Hubs

In this guide we'll run through the process of onboarding your Azure Event Hubs to Defense.com's SIEM.

Kara Crimson avatar
Written by Kara Crimson
Updated over a week ago

Before you get started

  • Access to the Azure portal.

  • Permissions to manage Event Hubs and Resource Diagnostic Settings.

Creating a resource group

  1. Sign in to the Azure portal.

  2. In the left navigation pane, select Resource groups → Create.

  3. Choose your Subscription.

  4. Enter a unique name for the resource group. The portal automatically checks name availability.

  5. Select a Region for the resource group.

  6. Click Review + Create, then Create.

Creating an Event Hubs namespace

An Event Hubs namespace acts as a container for one or more event hubs.

  1. In the Azure portal, select All services → Event Hubs (under Analytics).

  2. On the Event Hubs page, select Create.

  3. On the Create namespace page:

    • Choose your Subscription.

    • Select the Resource group you just created.

    • Enter a unique namespace name.

    • Choose a Location.

    • Select a Pricing tier:

      • Basic – for standard workloads

      • Standard – required if using Apache Kafka

    • Leave Throughput units (Standard tier) or Processing units (Premium tier) at default values.

    • Optionally, enable Auto-inflate to automatically increase throughput units (TUs) when demand grows, preventing throttling.

  4. Select Review + Create, then Create.

  5. After the deployment is complete, select Go to resource to open your new namespace.

Creating an Event Hub

  1. On the Overview page of your Event Hubs namespace, select + Event hub.

  2. Enter a name for your event hub.

  3. Review the Settings:

    • Partition Count – defines how many parallel consumers can read data.

    • Message Retention – determines how long Event Hubs retains data.

  4. Select Review + Create, then Create.

  5. You can monitor the creation progress in Notifications. Once complete, your event hub will appear in the namespace’s list of event hubs.

Configuring Diagnostic Settings

Please refer to this documentation to configure Diagnostic settings for the resources you wish to log to us via streaming to your Event Hub.

Completing the integration

Once the steps outlined above have been completed, please reach out to our Technical Support team, providing the following information.

  • Event Hub name

  • Event Hub primary connection string

Our team will then complete the integration.

And that's it! You've successfully integrated Azure Event Hubs🎉

Did this answer your question?