---
title: Azure Virtual Machine discovery
description: Azure VM discovery allows to use the Azure APIs to perform automatic discovery. Here is a simple sample configuration: Create Azure instances, Install...
url: https://www.elastic.co/elastic/docs-builder/docs/3028/reference/elasticsearch/plugins/discovery-azure-classic-usage
products:
  - Elasticsearch
---

# Azure Virtual Machine discovery
Azure VM discovery allows to use the Azure APIs to perform automatic discovery. Here is a simple sample configuration:
```yaml
cloud:
    azure:
        management:
             subscription.id: XXX-XXX-XXX-XXX
             cloud.service.name: es-demo-app
             keystore:
                   path: /path/to/azurekeystore.pkcs12
                   password: WHATEVER
                   type: pkcs12

discovery:
    seed_providers: azure
```

<admonition title="Binding the network host">
  The keystore file must be placed in a directory accessible by Elasticsearch like the `config` directory.It’s important to define `network.host` as by default it’s bound to `localhost`.You can use [core network host settings](https://www.elastic.co/elastic/docs-builder/docs/3028/reference/elasticsearch/configuration-reference/networking-settings). For example `_en0_`.
</admonition>


## How to start (short story)

- Create Azure instances
- Install Elasticsearch
- Install Azure plugin
- Modify `elasticsearch.yml` file
- Start Elasticsearch


## Azure credential API settings

The following are a list of settings that can further control the credential API:
<definitions>
  <definition term="cloud.azure.management.keystore.path">
    /path/to/keystore
  </definition>
  <definition term="cloud.azure.management.keystore.type">
    `pkcs12`, `jceks` or `jks`. Defaults to `pkcs12`.
  </definition>
  <definition term="cloud.azure.management.keystore.password">
    your_password for the keystore
  </definition>
  <definition term="cloud.azure.management.subscription.id">
    your_azure_subscription_id
  </definition>
  <definition term="cloud.azure.management.cloud.service.name">
    your_azure_cloud_service_name. This is the cloud service name/DNS but without the `cloudapp.net` part. So if the DNS name is `abc.cloudapp.net` then the `cloud.service.name` to use is just `abc`.
  </definition>
</definitions>


## Advanced settings

The following are a list of settings that can further control the discovery:
<definitions>
  <definition term="discovery.azure.host.type">
    Either `public_ip` or `private_ip` (default). Azure discovery will use the one you set to ping other nodes.
  </definition>
  <definition term="discovery.azure.endpoint.name">
    When using `public_ip` this setting is used to identify the endpoint name used to forward requests to Elasticsearch (aka transport port name). Defaults to `elasticsearch`. In Azure management console, you could define an endpoint `elasticsearch` forwarding for example requests on public IP on port 8100 to the virtual machine on port 9300.
  </definition>
  <definition term="discovery.azure.deployment.name">
    Deployment name if any. Defaults to the value set with `cloud.azure.management.cloud.service.name`.
  </definition>
  <definition term="discovery.azure.deployment.slot">
    Either `staging` or `production` (default).
  </definition>
</definitions>

For example:
```yaml
discovery:
    type: azure
    azure:
        host:
            type: private_ip
        endpoint:
            name: elasticsearch
        deployment:
            name: your_azure_cloud_service_name
            slot: production
```