Forwarding Azure logs to ELK

Question

We have an application running on Azure. We use Application Insights to monitor the cloud solution. To monitor the application itself we started playing with the log analytics but it seemed that it was almost impossible to get custom logs decently parsed by log analytics. Therefore we are looking into using an ELK instance. However, I cannot find the right documentation on how to set this up. Is anyone familiar with something like that to point me in the right direction?

Thanks in advance. Regards

Answer 1

Your question is quite generic so I only have this as a pointer for log parsing:

https://www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html

Might be just what you need. If it's not sufficient, browse through the other logstash filters.