Skip to content

Commit 10d7606

Browse files
committed
spell out VNet flow logs
1 parent 3a610ba commit 10d7606

File tree

2 files changed

+26
-26
lines changed

2 files changed

+26
-26
lines changed

articles/network-watcher/frequently-asked-questions.yml

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ metadata:
66
ms.author: halkazwini
77
ms.service: network-watcher
88
ms.topic: faq
9-
ms.date: 03/31/2024
9+
ms.date: 04/24/2024
1010
title: "Network Watcher frequently asked questions (FAQ)"
1111
summary: |
1212
This article provides answers to some of the frequently asked questions asked about Azure Network Watcher.
@@ -35,8 +35,8 @@ sections:
3535
* [Packet capture](./network-watcher-packet-capture-overview.md) enables you to capture your virtual machine traffic.
3636
* [VPN troubleshoot](./network-watcher-troubleshoot-overview.md) runs multiple diagnostics checks on your VPN gateways and connections to help debug issues.
3737
* Traffic
38-
* [NSG flow logs](./network-watcher-nsg-flow-logging-overview.md) and [VNet flow logs (preview)](vnet-flow-logs-overview.md) allow you to log network traffic passing through your network security groups (NSGs) and virtual networks respectively.
39-
* [Traffic analytics](./traffic-analytics.md) processes your NSG flow log data enabling you to visualize, query, analyze, and understand your network traffic.
38+
* [Network security group flow logs](./network-watcher-nsg-flow-logging-overview.md) and [virtual network flow logs](vnet-flow-logs-overview.md) allow you to log network traffic passing through your network security groups (NSGs) and virtual networks respectively.
39+
* [Traffic analytics](./traffic-analytics.md) processes your network security group flow log data enabling you to visualize, query, analyze, and understand your network traffic.
4040
4141
For more detailed information, see [Network Watcher overview](./network-watcher-overview.md).
4242
@@ -88,7 +88,7 @@ sections:
8888
- question: |
8989
What is the NetworkWatcherRG?
9090
answer: |
91-
NetworkWatcherRG is a resource group that's automatically created for Network Watcher resources. For example, Network Watcher regional instances and the NSG flow log resources are created in **NetworkWatcherRG** resource group. You can customize the name of Network Watcher resource group using [PowerShell](network-watcher-create.md?tabs=powershell#enable-network-watcher-for-your-region), [Azure CLI](network-watcher-create.md?tabs=cli#enable-network-watcher-for-your-region), or [REST API](/rest/api/network-watcher/network-watchers/create-or-update).
91+
NetworkWatcherRG is a resource group that's automatically created for Network Watcher resources. For example, Network Watcher regional instances and the network security group flow log resources are created in **NetworkWatcherRG** resource group. You can customize the name of Network Watcher resource group using [PowerShell](network-watcher-create.md?tabs=powershell#enable-network-watcher-for-your-region), [Azure CLI](network-watcher-create.md?tabs=cli#enable-network-watcher-for-your-region), or [REST API](/rest/api/network-watcher/network-watchers/create-or-update).
9292
9393
- question: |
9494
Does Network Watcher store customer data?
@@ -188,17 +188,17 @@ sections:
188188
- question: |
189189
What is the difference between NSG flow logs and NSG diagnostics?
190190
answer: |
191-
NSG flow logs log traffic flowing through a network security group. On the other hand, NSG diagnostics returns all network security groups that your traffic is traversing and the rules of each network security group that are applied to this traffic. Use NSG diagnostics to verify that your network security group rules are being applied as expected.
191+
Network security group flow logs log traffic flowing through a network security group. On the other hand, NSG diagnostics returns all network security groups that your traffic is traversing and the rules of each network security group that are applied to this traffic. Use NSG diagnostics to verify that your network security group rules are being applied as expected.
192192
193193
- question: |
194-
Can I log ESP and AH traffic using NSG flow logs?
194+
Can I log ESP and AH traffic using network security group flow logs?
195195
answer: |
196-
No, NSG flow logs don't support ESP and AH protocols.
196+
No, network security group flow logs don't support ESP and AH protocols.
197197
198198
- question: |
199199
Can I log ICMP traffic using flow logs?
200200
answer: |
201-
No, NSG flow logs and VNet flow logs don't support ICMP protocol.
201+
No, network security group flow logs and virtual network flow logs don't support ICMP protocol.
202202
203203
- question: |
204204
Can I delete a network security group that has flow logging enabled?
@@ -216,14 +216,14 @@ sections:
216216
Yes, you can use a storage account from a different subscription as long as this subscription is in the same region of the network security group and associated with the same Microsoft Entra tenant of the network security group or virtual network's subscription.
217217
218218
- question: |
219-
How do I use NSG flow logs with a storage account behind a firewall?
219+
How do I use network security group flow logs with a storage account behind a firewall?
220220
answer: |
221221
To use a storage account behind a firewall, you have to provide an exception for Trusted Microsoft Services to access your storage account:
222222
223223
1. Go to the storage account by entering the storage account's name in the search box at the top of the portal.
224224
2. Under the **Security + networking**, select **Networking**, then select **Firewalls and virtual networks**.
225225
3. In **Public network access**, select **Enabled from selected virtual networks and IP addresses**. Then under **Exceptions**, check the box next to **Allow Azure services on the trusted services list to access this storage account.**
226-
4. Enable NSG flow logs by creating a flow log for your target network security group using the storage account. For more information, see [Create a flow log](nsg-flow-logging.md#create-a-flow-log).
226+
4. Enable network security group flow logs by creating a flow log for your target network security group using the storage account. For more information, see [Create a flow log](nsg-flow-logging.md#create-a-flow-log).
227227
228228
You can check the storage logs after a few minutes. You should see an updated TimeStamp or a new JSON file created.
229229
@@ -233,32 +233,32 @@ sections:
233233
Network Watcher has a built-in fallback mechanism that it uses when connecting to a storage account behind a firewall (firewall enabled). It tries to connect to the storage account using a key, and if that fails, it switches to a token. In this case, a 403 error is logged in the storage account activity log.
234234
235235
- question: |
236-
Can Network Watcher send NSG flow logs data to a storage account enabled with Private Endpoint?
236+
Can Network Watcher send network security group flow logs data to a storage account enabled with Private Endpoint?
237237
answer: |
238-
Yes, Network Watcher supports sending NSG flow logs data to a storage account enabled with a private endpoint.
238+
Yes, Network Watcher supports sending network security group flow logs data to a storage account enabled with a private endpoint.
239239
240240
- question: |
241-
How do I use NSG flow logs with a storage account behind a Service Endpoint?
241+
How do I use network security group flow logs with a storage account behind a Service Endpoint?
242242
answer: |
243-
NSG flow logs are compatible with Service Endpoints without requiring any extra configuration. For more information, see [Enable a service endpoint](../virtual-network/tutorial-restrict-network-access-to-resources.md#enable-a-service-endpoint).
243+
Network security group flow logs are compatible with Service Endpoints without requiring any extra configuration. For more information, see [Enable a service endpoint](../virtual-network/tutorial-restrict-network-access-to-resources.md#enable-a-service-endpoint).
244244
245245
- question: |
246246
What is the difference between flow logs versions 1 and 2?
247247
answer: |
248-
Flow logs version 2 introduces the concept of *flow state* and stores information about bytes and packets transmitted. For more information, see [NSG flow log format](./network-watcher-nsg-flow-logging-overview.md#log-format).
248+
Flow logs version 2 introduces the concept of *flow state* and stores information about bytes and packets transmitted. For more information, see [Network security group flow log format](./network-watcher-nsg-flow-logging-overview.md#log-format).
249249
250250
- question: |
251251
Can I create a flow log for a network security group that has a read-only lock?
252252
answer: |
253-
No, a **read-only** lock on a network security group prevents the creation of the corresponding NSG flow log.
253+
No, a **read-only** lock on a network security group prevents the creation of the corresponding network security group flow log.
254254
255255
- question: |
256256
Can I create a flow log for a network security group that has a cannot-delete lock?
257257
answer: |
258-
Yes, a **cannot-delete** lock on the network security group doesn't prevent the creation or modification of the corresponding NSG flow log.
258+
Yes, a **cannot-delete** lock on the network security group doesn't prevent the creation or modification of the corresponding network security group flow log.
259259
260260
- question: |
261-
Can I automate NSG flow logs?
261+
Can I automate network security group flow logs?
262262
answer: |
263-
Yes, you can automate NSG flow logs via Azure Resource Manager templates (ARM templates). For more information, see [Configure NSG flow logs using an Azure Resource Manager (ARM) template](quickstart-configure-network-security-group-flow-logs-from-arm-template.md).
263+
Yes, you can automate network security group flow logs via Azure Resource Manager templates (ARM templates). For more information, see [Configure NSG flow logs using an Azure Resource Manager (ARM) template](quickstart-configure-network-security-group-flow-logs-from-arm-template.md).
264264

articles/network-watcher/index.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
### YamlMime:Landing
22

33
title: Network Watcher documentation
4-
summary: Learn how to use Azure Network Watcher. Quickstarts, tutorials, and more, show you how to gain insight into your Azure Virtual Network with tools like packet capture and NSG flows logs, to diagnose problems with traffic filtering and routing, and to monitor connections.
4+
summary: Learn how to use Azure Network Watcher. Quickstarts, tutorials, and more, show you how to gain insight into your Azure Virtual Network with tools like packet capture and flows logs, to diagnose problems with traffic filtering and routing, and to monitor connections.
55
metadata:
66
title: Network Watcher Documentation
7-
description: Learn how to use Azure Network Watcher. Quickstarts, tutorials, and more, show you how to gain insight into your Azure Virtual Network with tools like packet capture and NSG flows logs, to diagnose problems with traffic filtering and routing, and to monitor connections.
7+
description: Learn how to use Azure Network Watcher. Quickstarts, tutorials, and more, show you how to gain insight into your Azure Virtual Network with tools like packet capture and flows logs, to diagnose problems with traffic filtering and routing, and to monitor connections.
88
ms.service: network-watcher
99
ms.topic: landing-page
1010
author: halkazwini
1111
ms.author: halkazwini
12-
ms.date: 04/03/2024
12+
ms.date: 04/24/2024
1313
# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | learn | overview | quickstart | reference | tutorial | whats-new
1414

1515
landingContent:
@@ -80,19 +80,19 @@ landingContent:
8080
linkLists:
8181
- linkListType: concept
8282
links:
83-
- text: NSG flow logs overview
83+
- text: Network security group flow logs overview
8484
url: nsg-flow-logs-overview.md
85-
- text: VNet flow logs overview
85+
- text: Virtual network flow logs overview
8686
url: vnet-flow-logs-overview.md
8787
- linkListType: tutorial
8888
links:
8989
- text: Log VM network traffic
9090
url: nsg-flow-logs-tutorial.md
9191
- linkListType: how-to-guide
9292
links:
93-
- text: Manage NSG flow logs
93+
- text: Manage network security group flow logs
9494
url: nsg-flow-logs-portal.md
95-
- text: Manage VNet flow logs
95+
- text: Manage virtual network flow logs
9696
url: vnet-flow-logs-portal.md
9797

9898
# Card (optional)

0 commit comments

Comments
 (0)