---
title: "Kentik for Azure"
slug: "kentik-for-azure"
description: "Integrate Kentik with Microsoft Azure by following our guide on flow log collection, configuration, and optimizing network performance."
tags: ["Flow Logs", "Kentik Integration", "Microsoft Azure"]
updated: 2026-04-29T14:05:29Z
published: 2026-04-29T14:05:44Z
canonical: "kb.kentik.com/kentik-for-azure"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.kentik.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Kentik for Azure

This guide provides instructions for integrating Kentik with Microsoft Azure.

![Diagram illustrating Azure subscriptions, roles, and data flow to Kentik account.](https://cdn.us.document360.io/082e25b5-afce-42d4-8f47-70bd3f1d02b7/Images/Documentation/Simple Azure Reference Architecture Diagram.jpg)

A reference architecture diagram showing Azure subscriptions, roles, and data flow to a Kentik account.

## Microsoft Flow Logging Recommendations

- Kentik supports processing both VNet (Virtual Network) flow logs and NSG (Network Security Group) flow logs from your Microsoft Azure storage account. However, Microsoft advises enabling only **one type of flow log at a time** to prevent duplicate traffic recording and additional costs (see [**VNet Flow Logs Overview**](https://learn.microsoft.com/en-us/azure/network-watcher/vnet-flow-logs-overview)).
- Kentik encourages all customers to use [**Microsoft's migration scripts**](https://learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-migrate) to enable VNet flow logs. This ensures your Kentik account remains current and avoids potential issues.

## Process Overview

Integrating Azure with Kentik involves preparing your Azure environment and configuring the Kentik portal to enable the collection of metadata, [**flow logs**](/v1/docs/flow-firewall-log-collection#azure-flow-log-collection), [**firewall logs**](/v1/docs/flow-firewall-log-collection#azure-firewall-log-collection), and metrics.

> [!TIP]
> **TIP:** See the [**Cloud Overview**](/v1/docs/cloud-overview) for an introduction to Kentik cloud setup.

We recommend following this process in order:

1. [**Azure Prerequisites & Roles**](/v1/docs/azure-prerequisites-roles): Verify you have the correct administrative permissions in Azure, choose your authentication method (Kentik Enterprise App vs. Custom App Registration), and gather your necessary Subscription and Resource Group IDs.
2. [**Flow/Firewall Log Collection**](/v1/docs/flow-firewall-log-collection): Configure your Azure environment to generate VNet/NSG flow logs and firewall logs, and export them to a designated Azure storage account.
3. [**Kentik Export Configuration**](/v1/docs/kentik-export-configuration-azure): Use the Kentik portal UI to create a "cloud export" that authorizes Kentik to ingest the telemetry from your Azure storage account.

**Optional***:* If you prefer to deploy using infrastructure-as-code, see [**Automated Configuration (Powershell)**](/v1/docs/automated-configuration-powershell) to script the Azure storage and Kentik export setup simultaneously.

Once the setup is complete, you can use the Kentik portal to monitor your Azure network traffic, visualize resource utilization, and gain insights to optimize network performance and security.

Next, let’s move onto completing the tasks in [**Azure Prerequisites & Roles**](/v1/docs/azure-prerequisites-roles).