Stability Level Preview
API Stability Preview

The createAzureEventHubIngestFeed() GraphQL mutation is used to create an ingest feed that uses Azure Event Hubs.

Syntax

Below is the syntax for the createAzureEventHubIngestFeed() mutation field:

graphql
createAzureEventHubIngestFeed(
       input: CreateAzureEventHubIngestFeed!
    ): IngestFeed!

Below is an example of how this mutation field might be used:

Raw
graphql
mutation {
	createAzureEventHubIngestFeed( input: {
       repositoryName: "humio",
       name: "test-feed2345",
       parser: "json-for-action",
       enabled: false,
       consumerGroup: "testgroup",
       eventHubName: "bucket-diagnostics",
       eventHubFullyQualifiedNamespace: "evh-diagnostics-test.servicebus.windows.net",
       preprocessing: { kind: ReadWhole },
       authentication: { kind: LogScaleConfig },
       checkpointHandling: { 
          kind: BlobStorage
          blobStorage: {
             blobStorageEndpoint: "https://storagedtaa7rvhirbwq.blob.core.windows.net/",
             containerName: "checkpointing" } },
       defaultCheckpoint: { kind: Earliest } }) 
    { id }
}
Mac OS or Linux (curl)
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
	createAzureEventHubIngestFeed( input: {
       repositoryName: \"humio\",
       name: \"test-feed2345\",
       parser: \"json-for-action\",
       enabled: false,
       consumerGroup: \"testgroup\",
       eventHubName: \"bucket-diagnostics\",
       eventHubFullyQualifiedNamespace: \"evh-diagnostics-test.servicebus.windows.net\",
       preprocessing: { kind: ReadWhole },
       authentication: { kind: LogScaleConfig },
       checkpointHandling: { 
          kind: BlobStorage
          blobStorage: {
             blobStorageEndpoint: \"https://storagedtaa7rvhirbwq.blob.core.windows.net/\",
             containerName: \"checkpointing\" } },
       defaultCheckpoint: { kind: Earliest } }) 
    { id }
}"
}
EOF
Mac OS or Linux (curl) One-line
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql \
    -H "Authorization: Bearer $TOKEN" \
    -H "Content-Type: application/json" \
    -d @- << EOF
{"query" : "mutation {
	createAzureEventHubIngestFeed( input: {
       repositoryName: \"humio\",
       name: \"test-feed2345\",
       parser: \"json-for-action\",
       enabled: false,
       consumerGroup: \"testgroup\",
       eventHubName: \"bucket-diagnostics\",
       eventHubFullyQualifiedNamespace: \"evh-diagnostics-test.servicebus.windows.net\",
       preprocessing: { kind: ReadWhole },
       authentication: { kind: LogScaleConfig },
       checkpointHandling: { 
          kind: BlobStorage
          blobStorage: {
             blobStorageEndpoint: \"https://storagedtaa7rvhirbwq.blob.core.windows.net/\",
             containerName: \"checkpointing\" } },
       defaultCheckpoint: { kind: Earliest } }) 
    { id }
}"
}
EOF
Windows Cmd and curl
shell
curl -v -X POST $YOUR_LOGSCALE_URL/graphql ^
    -H "Authorization: Bearer $TOKEN" ^
    -H "Content-Type: application/json" ^
    -d @'{"query" : "mutation { ^
	createAzureEventHubIngestFeed( input: { ^
       repositoryName: \"humio\", ^
       name: \"test-feed2345\", ^
       parser: \"json-for-action\", ^
       enabled: false, ^
       consumerGroup: \"testgroup\", ^
       eventHubName: \"bucket-diagnostics\", ^
       eventHubFullyQualifiedNamespace: \"evh-diagnostics-test.servicebus.windows.net\", ^
       preprocessing: { kind: ReadWhole }, ^
       authentication: { kind: LogScaleConfig }, ^
       checkpointHandling: {  ^
          kind: BlobStorage ^
          blobStorage: { ^
             blobStorageEndpoint: \"https://storagedtaa7rvhirbwq.blob.core.windows.net/\", ^
             containerName: \"checkpointing\" } }, ^
       defaultCheckpoint: { kind: Earliest } })  ^
    { id } ^
}" ^
} '
Windows Powershell and curl
powershell
curl.exe -X POST 
    -H "Authorization: Bearer $TOKEN"
    -H "Content-Type: application/json"
    -d '{"query" : "mutation {
	createAzureEventHubIngestFeed( input: {
       repositoryName: \"humio\",
       name: \"test-feed2345\",
       parser: \"json-for-action\",
       enabled: false,
       consumerGroup: \"testgroup\",
       eventHubName: \"bucket-diagnostics\",
       eventHubFullyQualifiedNamespace: \"evh-diagnostics-test.servicebus.windows.net\",
       preprocessing: { kind: ReadWhole },
       authentication: { kind: LogScaleConfig },
       checkpointHandling: { 
          kind: BlobStorage
          blobStorage: {
             blobStorageEndpoint: \"https://storagedtaa7rvhirbwq.blob.core.windows.net/\",
             containerName: \"checkpointing\" } },
       defaultCheckpoint: { kind: Earliest } }) 
    { id }
}"
}'
    "$YOUR_LOGSCALE_URL/graphql"
Perl
perl
#!/usr/bin/perl

use HTTP::Request;
use LWP;

my $TOKEN = "TOKEN";

my $uri = '$YOUR_LOGSCALE_URL/graphql';

my $json = '{"query" : "mutation {
	createAzureEventHubIngestFeed( input: {
       repositoryName: \"humio\",
       name: \"test-feed2345\",
       parser: \"json-for-action\",
       enabled: false,
       consumerGroup: \"testgroup\",
       eventHubName: \"bucket-diagnostics\",
       eventHubFullyQualifiedNamespace: \"evh-diagnostics-test.servicebus.windows.net\",
       preprocessing: { kind: ReadWhole },
       authentication: { kind: LogScaleConfig },
       checkpointHandling: { 
          kind: BlobStorage
          blobStorage: {
             blobStorageEndpoint: \"https://storagedtaa7rvhirbwq.blob.core.windows.net/\",
             containerName: \"checkpointing\" } },
       defaultCheckpoint: { kind: Earliest } }) 
    { id }
}"
}';
my $req = HTTP::Request->new("POST", $uri );

$req->header("Authorization" => "Bearer $TOKEN");
$req->header("Content-Type" => "application/json");

$req->content( $json );

my $lwp = LWP::UserAgent->new;

my $result = $lwp->request( $req );

print $result->{"_content"},"\n";
Python
python
#! /usr/local/bin/python3

import requests

url = '$YOUR_LOGSCALE_URL/graphql'
mydata = r'''{"query" : "mutation {
	createAzureEventHubIngestFeed( input: {
       repositoryName: \"humio\",
       name: \"test-feed2345\",
       parser: \"json-for-action\",
       enabled: false,
       consumerGroup: \"testgroup\",
       eventHubName: \"bucket-diagnostics\",
       eventHubFullyQualifiedNamespace: \"evh-diagnostics-test.servicebus.windows.net\",
       preprocessing: { kind: ReadWhole },
       authentication: { kind: LogScaleConfig },
       checkpointHandling: { 
          kind: BlobStorage
          blobStorage: {
             blobStorageEndpoint: \"https://storagedtaa7rvhirbwq.blob.core.windows.net/\",
             containerName: \"checkpointing\" } },
       defaultCheckpoint: { kind: Earliest } }) 
    { id }
}"
}'''

resp = requests.post(url,
                     data = mydata,
                     headers = {
   "Authorization" : "Bearer $TOKEN",
   "Content-Type" : "application/json"
}
)

print(resp.text)
Node.js
javascript
const https = require('https');

const data = JSON.stringify(
    {"query" : "mutation {
	createAzureEventHubIngestFeed( input: {
       repositoryName: \"humio\",
       name: \"test-feed2345\",
       parser: \"json-for-action\",
       enabled: false,
       consumerGroup: \"testgroup\",
       eventHubName: \"bucket-diagnostics\",
       eventHubFullyQualifiedNamespace: \"evh-diagnostics-test.servicebus.windows.net\",
       preprocessing: { kind: ReadWhole },
       authentication: { kind: LogScaleConfig },
       checkpointHandling: { 
          kind: BlobStorage
          blobStorage: {
             blobStorageEndpoint: \"https://storagedtaa7rvhirbwq.blob.core.windows.net/\",
             containerName: \"checkpointing\" } },
       defaultCheckpoint: { kind: Earliest } }) 
    { id }
}"
}
);


const options = {
  hostname: '$YOUR_LOGSCALE_URL/graphql',
  path: '/graphql',
  port: 443,
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
    'Content-Length': data.length,
    Authorization: 'BEARER ' + process.env.TOKEN,
    'User-Agent': 'Node',
  },
};

const req = https.request(options, (res) => {
  let data = '';
  console.log(`statusCode: ${res.statusCode}`);

  res.on('data', (d) => {
    data += d;
  });
  res.on('end', () => {
    console.log(JSON.parse(data).data);
  });
});

req.on('error', (error) => {
  console.error(error);
});

req.write(data);
req.end();
Example Responses
Success (HTTP Response Code 200 OK)
json
{
  "data": {
    "createAzureEventHubIngestFeed": {
      "id": "abc123"
    }
  }
}

Given Datatypes

For the CreateAzureEventHubIngestFeed given datatype, there are several parameters. Below is a list of them, along with a description of each.

Table: CreateAzureEventHubIngestFeed

ParameterTypeRequiredDefaultStabilityDescription
Some arguments may be required, as indicated in the Required column. For some fields, this column indicates that a result will always be returned for this column.
Table last updated: May 19, 2025
authenticationAzureEventHubsAuthenticationInputyes PreviewAuthentication method for Azure event hub. See AzureEventHubsAuthenticationInput.
checkpointHandlingAzureEventHubsCheckpointHandlingInputyes PreviewThe configuration for how the Event Hub checkpoints should be handled. See AzureEventHubsCheckpointHandlingInput.
consumerGroupstringyes PreviewThe consumer group for the Event Hub.
defaultCheckpointAzureEventHubsCheckpointInputyes PreviewSpecifies the starting point for reading events from the Event Hub when no previous checkpoint exists. See AzureEventHubsCheckpointInput.
descriptionstring  PreviewThe description of the ingest feed.
enabledbooleanyes PreviewWhether the ingest feed is enabled.
eventHubFullyQualifiedNamespacestringyes PreviewThe fully qualified namespace of the Event Hub. Often structured like <namespace>.servicebus.windows.net
eventHubNamestringyes PreviewThe name of the Event Hub.
namestringyes PreviewThe name of the ingest feed.
parserstringyes PreviewThe unique identifier or name of the parser that should be used to parse the ingest feed. Parsers in packages can be referred to as packagescope/packagename:parsername.
preprocessingAzureEventHubsPreprocessingInputyes PreviewThe preprocessing to apply to an ingest feed before parsing. See AzureEventHubsPreprocessingInput.
repositoryNameRepoOrViewNameyes PreviewThe name of the repository of the ingest feed. RepoOrViewName is a scalar.

Returned Datatypes

For IngestFeed, there are several parameters that may be requested. Below is a list of them:

Table: IngestFeed

ParameterTypeRequiredDefaultStabilityDescription
Some arguments may be required, as indicated in the Required column. For some fields, this column indicates that a result will always be returned for this column.
Table last updated: Jul 24, 2025
createdAtlongyes Long-TermUnix timestamp for when this feed was created.
descriptionstring  Long-TermA description of the ingest feed.
enabledbooleanyes Long-TermWhether the ingest from the ingest feed is enabled.
executionInfoIngestFeedExecutionInfo  Long-TermDetails about how the ingest feed is running. See IngestFeedExecutionInfo.
forceStoppedbooleanyes PreviewWhether the ingest feed is force stopped, meaning only a cluster manager can start the ingest feed again.
idstringyes Long-TermThe unique identifier of the ingest feed.
namestringyes Long-TermThe name of the ingest feed.
parserParser  Long-TermThe parser used to parse the ingest feed. See Parser.
sourceIngestFeedSourceyes Long-TermThe source of the ingest feed. See IngestFeedSource.