What’s new in Fabric Eventstream: 2026 Q1 Edition

[Alicia_Li_MSFT]

Coauthor: Arindam Chatterjee

Over the first quarter of 2026, Fabric Eventstreams shipped meaningful improvements across three themes that have repeatedly come up in feedback from our broad community of customers and partners: broader connectivity, richer real-time processing, and secure enterprise‑ready networking and operations.

This post highlights some of the most impactful new Eventstreams-related features and capabilities delivered between January and March 2026.

Expand your access to real‑time data: New and enhanced connectors

Eventstreams continues to expand the range of real‑time signals you can bring into Fabric — from operational databases and IoT telemetry to external context and detection signals. In Q1 2026, these enhancements focused on lowering barriers to adopting a broader range of IoT devices, consuming public weather feeds and making it easier to turn raw events into analytics‑ready streams.

DeltaFlow: Building event-driven applications on database changes (Preview)

Many real‑time applications start with operational databases, where inserts, updates, and deletes represent meaningful business events. DeltaFlow (Preview) simplifies turning those database changes into structured, analytics‑ready streams in Fabric — without requiring teams to reason about raw CDC formats, handling schema evolution, or managing destination tables.
Documentation: DeltaFlow output transformation (Preview)

Blog post: Building real-time, event-driven applications with Database CDC feeds and Fabric Eventstreams DeltaF...

MQTT v3 support in the Eventstreams MQTT connector (Preview)

Many customers rely on MQTT as the “last mile” protocol for IoT telemetry. In January, Eventstreams expanded MQTT ingestion compatibility by adding MQTT v3.1 and v3.1.1 support to the Eventstream MQTT connector. With this added support, users can now onboard existing brokers and device fleets without protocol upgrades or custom shims.
Documentation: Add MQTT source to an eventstream

Turn detected anomalies into streaming inputs (Preview)

Fabric Eventstreams now supports Anomaly Detection as a source. This allows detection signals to participate as first‑class streaming inputs — enabling enrichment, routing, and automation using the same Eventstreams pipelines as any other real‑time source.

Documentation: Add Anomaly detection events source to an eventstream

Rich and robust real-time stream processing

As real‑time streaming data platforms mature, teams often need more expressive processing, combining streaming data with advanced analytics, stateful computation, and custom logic. In Q1, Eventstreams deepens its integration with Spark Structured Streaming and Notebooks to support these richer real‑time workloads.

Process streaming data with Fabric Eventstreams & Spark streaming (Preview)

Want to process streaming data in Eventstreams using Spark Structured Streaming and Notebooks? Deeper integration between Eventstreams and Spark notebooks makes it easier for Spark developers to work with real‑time data without stitching together connection strings, boilerplate code, and custom ingestion glue.

This deeper integration specifically enables:

• Easy discovery and exploration of Eventstreams via Real‑Time Hub from Fabric Notebooks.
• Automatically generate PySpark code snippets to connect to selected Eventstreams.
• Seamlessly select, load, and reuse shared Fabric Notebooks from Eventstreams.
• Connect securely to Eventsterams from Fabric Spark clusters without specifying connection strings and SAS keys from code.
• Use Notebook auto-retry policies to automatically restart Spark jobs in case of errors.

Documentation: Add a Spark Notebook destination to an eventstream

Blog post: Bringing together Fabric Real-time Intelligence, Notebook and Spark Structured Streaming (Preview)

Operate with confidence: Reliability, security and control

Enterprise real‑time workloads require more than fast data movement. They demand secure connectivity, operational control, and predictable behavior in regulated environments. Q1 enhancements focus on making Eventstreams easier to deploy and operate with confidence at enterprise scale.

Stream real-time data from private networks into Eventstreams (Preview)

Fabric Eventstreams now supports streaming from sources that live in private network environments (VNets or onprem). You can now use an Azure managed virtual network as an intermediary bridge (connected via VPN, ExpressRoute, peering, private endpoints, etc.), with Eventstream connectors injected into that virtual network. This feature also includes a streaming virtual network data gateway experience in Fabric for managing these resources.

This enables Eventstreams to be used in regulated and network‑isolated environments, without compromising real‑time ingestion or operational simplicity.

Documentation: Eventstream streaming connector virtual network and on-premises support overview

Secure data streaming: Custom CA and mTLS in Fabric Eventstream connectors (Preview)

Eventstream connectors can leverage certificates stored and managed in Azure Key Vault to encrypt data in transit, significantly enhancing enterprise-grade data streaming security across environments. With support for custom CA certificates and mTLS, Eventstream enables encrypted, mutually authenticated connections while centralizing certificate management — simplifying sharing across teams, enforcing consistent security practices, and enabling seamless certificate rotation without manual updates.

This feature is now available for Kafka-based sources, including Apache Kafka, Amazon Managed Streaming for Apache Kafka, and Confluent Cloud for Apache Kafka, as well as Confluent Schema Registry.

Documentation: Add and Manage Eventstream Sources (for detailed source specific documentation)

Putting It All Together: A real‑time operations scenario

In our July–December 2025 update, we described an end‑to‑end real‑time operations scenario for a global online service, bringing together application signals, infrastructure telemetry, and external context in Eventstreams. Using the Q1 2026 updates, teams can deploy more use cases, with less integration effort while improving their security and compliance posture.

They start by streaming order, payment, and fulfillment changes from operational databases such as Azure SQL or PostgreSQL using DeltaFlow (Preview). At the edge, IoT telemetry from operational assets like warehouse sensors, barcode scanners, and temperature monitors are ingested using the MQTT connector with MQTT v3 support, simplifying onboarding of existing device fleets. Private network connectivity ensures that these critical data sources can remain securely isolated behind private link-enabled environments.

As the system runs, Anomaly Detection emits detection results directly into Eventstreams for real-time alerting & analytics.

Spark developers consume these Eventstreams using Notebooks and Spark Structured Streaming (Preview) to build real‑time AI pipelines (e.g. generating rolling features, performing near‑real‑time scoring, or enriching incidents with model output).

Together, these Q1 updates deliver the same promised value as last quarter — now simpler to assemble, more resilient to change, and ready for enterprise deployment by default.

Try it and share your feedback

We look forward to seeing what you build using these latest enhancements to Eventstreams — from IoT and weather-driven monitoring to CD-powered event-driven apps, to Spark and SQL based streaming processing, to secure ingestion to from private networks.

Your feedback directly shapes what we build next. So, get involved and let us know what you think:

• Get started with a free trial of Microsoft Fabric today!
• Have a question about Eventstreams? Email us at askeventstreams@microsoft.com
• Post an idea on Fabric Ideas to submit your idea, vote on others, and help surface what matters most to the community.
• Join the Fabric Community to collaborate with others building real-time solutions.