Skip to main content

General availability: Azure Data Explorer and subnet delegation

Published date: June 17, 2021

Azure Data Explorer (ADX) supports virtual network injection. In the past customers had challenges with the manual way of configuring the Network Security Group (NSG) rules needed to succesfully deploy the service to a virtual network. Designating the subnet to "Microsoft.Kusto/clusters" automatically applies the required NSG rules.

Subnet delegation enables you to designate a specific subnet for an Azure PaaS service of your choice that needs to be injected into your virtual network. When you delegate a subnet to Azure Data Explorer, you allow the service to establish some basic network configuration rules for that subnet, which helps ADX operate in a stable manner.

Since the beginning of June 2021, deploying an Azure Data Explorer into a virtual network enforces subnet delegation for "Microsoft.Kusto/clusters" to be configured. Opting out of this requirement is possible using the Preview features blade.

How to delegate a subnet to Azure Data Explorer

Azure Data Explorer and subnet delegation - Microsoft Tech Community

Deploy Azure Data Explorer into your Virtual Network | Microsoft Docs

What is subnet delegation in Azure virtual network? | Microsoft Docs

  • Azure Data Explorer
  • Features

Related Products