I am writing to you because I would need to export logs from inside elk to outside, like to blob in azure or any other destination pointc, for compliance purpose. Do you know any solution available?

Thank you very much!

I am writing to you because I would need to export logs from inside elk to outside, like to blob in azure or any other destination pointc, for compliance purpose. Do you know any solution available?

Thank you very much!

• azure
• elasticsearch
• export
• logstash

1 Answer 1

Tldr;

This is a common problem. There are multiple solutions around that. The most convenient is the snapshot capabilities of Elasticsearch.

Solutions:

Snapshot to azure

This documentation walk you through snapshotting the data on azure.

Pros:

• Supported by Elasticsearch
• Efficient, and low impact on Elasticsearch

Cons:

• Data is readable by Elasticsearch only

Fork before ingest

Send the data both to Elasticsearch as well as to azure blob storage

Pros:

• No extra load on Elasticsearch
• Simple to put in place

Cons:

• Does not deal with previously indexed data