Azure Event Grid source plugin - Cortex XCOR Documentation

This information is for Palo Alto Networks Telemetry Pipeline, which is a standalone product separate from Palo Alto Networks Cortex XCOR.

The Azure Event Grid source plugin (name: azeventgrid) lets you receive data from Azure and ingest it into a telemetry pipeline using the pull delivery API. This is a pull-based source plugin.

This plugin doesn’t support the use of a descriptive metadata name in the Pipeline Builder interface.

This plugin doesn’t support duplicates of itself within the same pipeline.

Supported telemetry types

The Azure Event Grid source plugin for Palo Alto Networks Telemetry Pipeline supports these telemetry types:

Logs	Metrics	Traces

Configuration parameters

Use the parameters in this section to configure the Azure Event Grid source plugin. The Palo Alto Networks Telemetry Pipeline web interface uses the items in the Name column to describe these parameters. Pipeline configuration files use the items in the Key column as YAML keys.

General

Name	Key	Description	Default
Endpoint	`endpoint`	Required. The endpoint URL of your Event Grid instance’s namespace.	none
Shared Key	`key`	Required. The shared key used for authentication.	none
Topic Name	`topicName`	Required. The topic name from which to receive events.	none
Event Subscription Name	`eventSubscriptionName`	Required. The event subscription name.	none

Advanced

Name	Key	Description	Default
Memory Buffer Limit	`mem_buf_limit`	Sets a limit for how much buffered data the plugin can write to memory, which affects backpressure. This value must follow Fluent Bit’s rules for unit sizes. If unspecified, no limit is enforced. For v2 pipelines, this parameter affects only pipelines with the Deployment or DaemonSet workload type. To learn more, see the v2 backpressure guide. For v3 pipelines, this parameter is independent from the OpenTelemetry `memory_limiter` and `batch` processors.	none

Example configuration

service:
  log_level: error
pipeline:
  inputs:
    - name: azeventgrid
      endpoint: https://myNamespaceName.westus-1.eventgrid.azure.net
      key: ${SECRET_AZEVENTGRID_KEY}
      topicName: myTopic
      eventSubscriptionName: myEventSubscription
  outputs:
    - name: stdout
      match: "*"

​Supported telemetry types

​Configuration parameters

​General

​Advanced

​Example configuration

Supported telemetry types

Configuration parameters

General

Advanced

Example configuration