For ELK use, we need attach new datadisk

root@abc:/mnt# grep SCSI /var/log/syslog
Nov 21 12:36:37 localhost kernel: [333388.594976] sd 5:0:0:0: [sdc] Attached SCSI disk

root@abc:/mnt# fdisk /dev/sdc

When you done with your vm, and upload to azure

Here is

Download tools from Microsoft

Open "Powershell"  with administrator authorization and import

Import-Module "C:\Program Files\Microsoft Virtual Machine Converter\MvmcCmdlet.psd1"

Converto vhd (replace column to fit you setting)

PS C:\Windows\system32> ConvertTo-MvmcVirtualHardDisk -SourceLiteralPath "d:\vm-elk\elk.vmdk" -DestinationLiteralPath "D:\" -VhdType DynamicHardDisk -VhdFormat Vhd

Azure login

Test implement ELK to collect windows event log to identify problems with servers.

Install new OS (Debian 8)

Install Java How to install java 8

Install elasticsearch

 wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.0.0.deb

dpkg -i elasticsearch-5.0.0.deb

Modify ad uncomment 

vi /etc/elasticsearch/elasticsearch.yml

 network.host: localhost

/etc/init.d/elasticsearch start

Install Kibana

 wget https://artifacts.elastic.co/downloads/kibana/kibana-5.0.0-amd64.deb