Create an Azure Data Explorer cluster in your virtual network
Azure Data Explorer supports deploying a cluster into a subnet in your virtual network (VNet). This capability enables you to access the cluster privately from your Azure virtual network or on-premises, access resource such as event hub and storage inside your virtual network, and restrict inbound and outbound traffic.
Note
Injecting a cluster into a virtual network enables you to manage all of its traffic. Therefore, you are responsible for ensuring that any connected services are able to communicate with each other, including Azure Event Hubs or Azure Storage accounts.
Prerequisites
- An Azure subscription. Create a free Azure account.
- Sign in to the Azure portal.
Create Virtual Network and subnet
To create the virtual network and subnet:
Select the + Create a resource button in the upper-left corner of the portal.
Search for Virtual Network.
Under Virtual Network, at the bottom of the screen, select Create.
In the Create virtual network window, complete the following information.

Setting Suggested value Field description Subscription Your subscription Select the Azure subscription that you want to use for your cluster. Resource group Your resource group Use an existing resource group or create a new resource group. Name AzureDataExplorerVnet Choose a name that identifies your virtual network in the resource group. Region West US Select the region that best meets your needs. Note
For production workloads, plan your subnet size according to plan subnet size in your VNet
Select Review + create to review your cluster details, and Create to provision the cluster.
When the deployment is complete, select Go to resource.
Go to Subnets blade and select the default subnet.

In your default subnet window:
- Select Microsoft.Kusto/clusters from the subnet delegation drop-down menu.
- Select Save.

Create a cluster
Create an Azure Data Explorer cluster with a defined set of compute and storage resources in an Azure resource group as described in create a cluster.
Prior to finalizing cluster creation, in the Create an Azure Data Explorer cluster window, select the Network tab to provide virtual network details using the resources created in the previous tabs:

Setting Suggested value Field description Subscription Your subscription Select the Azure subscription that you want to use for networking resources. Virtual Network AzureDataExplorerVnet Choose the virtual network created in the previous steps. Subnet default Choose the subnet created in the previous steps. Create Query Public IP:
- Select Create new
- In Create Public IP window, provide the following details:

Setting Suggested value Field description Name Engine-public-ip The name of the public ip address resource. Resource group Your resource group Select the resource group that you want to use for creating public IP. Do the same steps for Data ingestion Public IP
Select Review + create to create your cluster.
When the deployment is complete, select Go to resource.
To deploy your Azure Data Explorer cluster into your virtual network, use the Deploy Azure Data Explorer cluster into your VNet Azure Resource Manager template.