Skip to content

Commit 1d12fff

Browse files
prmerger-automator[bot]prmerger-automator[bot]
authored
Merge pull request #285801 from halkazwini/nw-nsgflow
SFI (IPs and SystemIDs)
2 parents c342998 + 7b201f6 commit 1d12fff

File tree

1 file changed

+36
-36
lines changed

1 file changed

+36
-36
lines changed

‎articles/network-watcher/nsg-flow-logs-overview.md

Lines changed: 36 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: halkazwini
66
ms.author: halkazwini
77
ms.service: azure-network-watcher
88
ms.topic: concept-article
9-
ms.date: 02/15/2024
9+
ms.date: 08/29/2024
1010

1111
#CustomerIntent: As an Azure administrator, I want to learn about NSG flow logs so that I can log my network traffic to analyze and optimize the network performance.
1212
---
@@ -121,7 +121,7 @@ Here's an example format of a version 1 NSG flow log:
121121
"records": [
122122
{
123123
"time": "2017-02-16T22:00:32.8950000Z",
124-
"systemId": "2c002c16-72f3-4dc5-b391-3444c3527434",
124+
"systemId": "55ff55ff-aa66-bb77-cc88-99dd99dd99dd",
125125
"category": "NetworkSecurityGroupFlowEvent",
126126
"resourceId": "/SUBSCRIPTIONS/00000000-0000-0000-0000-000000000000/RESOURCEGROUPS/FABRIKAMRG/PROVIDERS/MICROSOFT.NETWORK/NETWORKSECURITYGROUPS/FABRIAKMVM1-NSG",
127127
"operationName": "NetworkSecurityGroupFlowEvents",
@@ -134,7 +134,7 @@ Here's an example format of a version 1 NSG flow log:
134134
{
135135
"mac": "000D3AF8801A",
136136
"flowTuples": [
137-
"1487282421,42.119.146.95,10.1.0.4,51529,5358,T,I,D"
137+
"1487282421,192.0.2.95,10.1.0.4,51529,5358,T,I,D"
138138
]
139139
}
140140
]
@@ -145,10 +145,10 @@ Here's an example format of a version 1 NSG flow log:
145145
{
146146
"mac": "000D3AF8801A",
147147
"flowTuples": [
148-
"1487282370,163.28.66.17,10.1.0.4,61771,3389,T,I,A",
149-
"1487282393,5.39.218.34,10.1.0.4,58596,3389,T,I,A",
150-
"1487282393,91.224.160.154,10.1.0.4,61540,3389,T,I,A",
151-
"1487282423,13.76.89.229,10.1.0.4,53163,3389,T,I,A"
148+
"1487282370,192.0.2.17,10.1.0.4,61771,3389,T,I,A",
149+
"1487282393,203.0.113.34,10.1.0.4,58596,3389,T,I,A",
150+
"1487282393,192.0.2.154,10.1.0.4,61540,3389,T,I,A",
151+
"1487282423,203.0.113.229,10.1.0.4,53163,3389,T,I,A"
152152
]
153153
}
154154
]
@@ -158,7 +158,7 @@ Here's an example format of a version 1 NSG flow log:
158158
},
159159
{
160160
"time": "2017-02-16T22:01:32.8960000Z",
161-
"systemId": "2c002c16-72f3-4dc5-b391-3444c3527434",
161+
"systemId": "55ff55ff-aa66-bb77-cc88-99dd99dd99dd",
162162
"category": "NetworkSecurityGroupFlowEvent",
163163
"resourceId": "/SUBSCRIPTIONS/00000000-0000-0000-0000-000000000000/RESOURCEGROUPS/FABRIKAMRG/PROVIDERS/MICROSOFT.NETWORK/NETWORKSECURITYGROUPS/FABRIAKMVM1-NSG",
164164
"operationName": "NetworkSecurityGroupFlowEvents",
@@ -171,7 +171,7 @@ Here's an example format of a version 1 NSG flow log:
171171
{
172172
"mac": "000D3AF8801A",
173173
"flowTuples": [
174-
"1487282481,195.78.210.194,10.1.0.4,53,1732,U,I,D"
174+
"1487282481,198.51.100.194,10.1.0.4,53,1732,U,I,D"
175175
]
176176
}
177177
]
@@ -182,9 +182,9 @@ Here's an example format of a version 1 NSG flow log:
182182
{
183183
"mac": "000D3AF8801A",
184184
"flowTuples": [
185-
"1487282435,61.129.251.68,10.1.0.4,57776,3389,T,I,A",
186-
"1487282454,84.25.174.170,10.1.0.4,59085,3389,T,I,A",
187-
"1487282477,77.68.9.50,10.1.0.4,65078,3389,T,I,A"
185+
"1487282435,198.51.100.68,10.1.0.4,57776,3389,T,I,A",
186+
"1487282454,203.0.113.170,10.1.0.4,59085,3389,T,I,A",
187+
"1487282477,192.0.2.50,10.1.0.4,65078,3389,T,I,A"
188188
]
189189
}
190190
]
@@ -196,7 +196,7 @@ Here's an example format of a version 1 NSG flow log:
196196
"records": [
197197
{
198198
"time": "2017-02-16T22:00:32.8950000Z",
199-
"systemId": "2c002c16-72f3-4dc5-b391-3444c3527434",
199+
"systemId": "55ff55ff-aa66-bb77-cc88-99dd99dd99dd",
200200
"category": "NetworkSecurityGroupFlowEvent",
201201
"resourceId": "/SUBSCRIPTIONS/00000000-0000-0000-0000-000000000000/RESOURCEGROUPS/FABRIKAMRG/PROVIDERS/MICROSOFT.NETWORK/NETWORKSECURITYGROUPS/FABRIAKMVM1-NSG",
202202
"operationName": "NetworkSecurityGroupFlowEvents",
@@ -209,7 +209,7 @@ Here's an example format of a version 1 NSG flow log:
209209
{
210210
"mac": "000D3AF8801A",
211211
"flowTuples": [
212-
"1487282421,42.119.146.95,10.1.0.4,51529,5358,T,I,D"
212+
"1487282421,192.0.2.95,10.1.0.4,51529,5358,T,I,D"
213213
]
214214
}
215215
]
@@ -220,10 +220,10 @@ Here's an example format of a version 1 NSG flow log:
220220
{
221221
"mac": "000D3AF8801A",
222222
"flowTuples": [
223-
"1487282370,163.28.66.17,10.1.0.4,61771,3389,T,I,A",
224-
"1487282393,5.39.218.34,10.1.0.4,58596,3389,T,I,A",
225-
"1487282393,91.224.160.154,10.1.0.4,61540,3389,T,I,A",
226-
"1487282423,13.76.89.229,10.1.0.4,53163,3389,T,I,A"
223+
"1487282370,192.0.2.17,10.1.0.4,61771,3389,T,I,A",
224+
"1487282393,203.0.113.34,10.1.0.4,58596,3389,T,I,A",
225+
"1487282393,192.0.2.154,10.1.0.4,61540,3389,T,I,A",
226+
"1487282423,203.0.113.229,10.1.0.4,53163,3389,T,I,A"
227227
]
228228
}
229229
]
@@ -233,7 +233,7 @@ Here's an example format of a version 1 NSG flow log:
233233
},
234234
{
235235
"time": "2017-02-16T22:01:32.8960000Z",
236-
"systemId": "2c002c16-72f3-4dc5-b391-3444c3527434",
236+
"systemId": "55ff55ff-aa66-bb77-cc88-99dd99dd99dd",
237237
"category": "NetworkSecurityGroupFlowEvent",
238238
"resourceId": "/SUBSCRIPTIONS/00000000-0000-0000-0000-000000000000/RESOURCEGROUPS/FABRIKAMRG/PROVIDERS/MICROSOFT.NETWORK/NETWORKSECURITYGROUPS/FABRIAKMVM1-NSG",
239239
"operationName": "NetworkSecurityGroupFlowEvents",
@@ -246,7 +246,7 @@ Here's an example format of a version 1 NSG flow log:
246246
{
247247
"mac": "000D3AF8801A",
248248
"flowTuples": [
249-
"1487282481,195.78.210.194,10.1.0.4,53,1732,U,I,D"
249+
"1487282481,198.51.100.194,10.1.0.4,53,1732,U,I,D"
250250
]
251251
}
252252
]
@@ -257,9 +257,9 @@ Here's an example format of a version 1 NSG flow log:
257257
{
258258
"mac": "000D3AF8801A",
259259
"flowTuples": [
260-
"1487282435,61.129.251.68,10.1.0.4,57776,3389,T,I,A",
261-
"1487282454,84.25.174.170,10.1.0.4,59085,3389,T,I,A",
262-
"1487282477,77.68.9.50,10.1.0.4,65078,3389,T,I,A"
260+
"1487282435,198.51.100.68,10.1.0.4,57776,3389,T,I,A",
261+
"1487282454,203.0.113.170,10.1.0.4,59085,3389,T,I,A",
262+
"1487282477,192.0.2.50,10.1.0.4,65078,3389,T,I,A"
263263
]
264264
}
265265
]
@@ -269,7 +269,7 @@ Here's an example format of a version 1 NSG flow log:
269269
},
270270
{
271271
"time": "2017-02-16T22:02:32.9040000Z",
272-
"systemId": "2c002c16-72f3-4dc5-b391-3444c3527434",
272+
"systemId": "55ff55ff-aa66-bb77-cc88-99dd99dd99dd",
273273
"category": "NetworkSecurityGroupFlowEvent",
274274
"resourceId": "/SUBSCRIPTIONS/00000000-0000-0000-0000-000000000000/RESOURCEGROUPS/FABRIKAMRG/PROVIDERS/MICROSOFT.NETWORK/NETWORKSECURITYGROUPS/FABRIAKMVM1-NSG",
275275
"operationName": "NetworkSecurityGroupFlowEvents",
@@ -282,8 +282,8 @@ Here's an example format of a version 1 NSG flow log:
282282
{
283283
"mac": "000D3AF8801A",
284284
"flowTuples": [
285-
"1487282492,175.182.69.29,10.1.0.4,28918,5358,T,I,D",
286-
"1487282505,71.6.216.55,10.1.0.4,8080,8080,T,I,D"
285+
"1487282492,203.0.113.29,10.1.0.4,28918,5358,T,I,D",
286+
"1487282505,192.0.2.55,10.1.0.4,8080,8080,T,I,D"
287287
]
288288
}
289289
]
@@ -294,7 +294,7 @@ Here's an example format of a version 1 NSG flow log:
294294
{
295295
"mac": "000D3AF8801A",
296296
"flowTuples": [
297-
"1487282512,91.224.160.154,10.1.0.4,59046,3389,T,I,A"
297+
"1487282512,192.0.2.154,10.1.0.4,59046,3389,T,I,A"
298298
]
299299
}
300300
]
@@ -319,7 +319,7 @@ Here's an example format of a version 2 NSG flow log:
319319
"records": [
320320
{
321321
"time": "2018-11-13T12:00:35.3899262Z",
322-
"systemId": "a0fca5ce-022c-47b1-9735-89943b42f2fa",
322+
"systemId": "66aa66aa-bb77-cc88-dd99-00ee00ee00ee",
323323
"category": "NetworkSecurityGroupFlowEvent",
324324
"resourceId": "/SUBSCRIPTIONS/00000000-0000-0000-0000-000000000000/RESOURCEGROUPS/FABRIKAMRG/PROVIDERS/MICROSOFT.NETWORK/NETWORKSECURITYGROUPS/FABRIAKMVM1-NSG",
325325
"operationName": "NetworkSecurityGroupFlowEvents",
@@ -332,9 +332,9 @@ Here's an example format of a version 2 NSG flow log:
332332
{
333333
"mac": "000D3AF87856",
334334
"flowTuples": [
335-
"1542110402,94.102.49.190,10.5.16.4,28746,443,U,I,D,B,,,,",
336-
"1542110424,176.119.4.10,10.5.16.4,56509,59336,T,I,D,B,,,,",
337-
"1542110432,167.99.86.8,10.5.16.4,48495,8088,T,I,D,B,,,,"
335+
"1542110402,192.0.2.190,10.5.16.4,28746,443,U,I,D,B,,,,",
336+
"1542110424,203.0.113.10,10.5.16.4,56509,59336,T,I,D,B,,,,",
337+
"1542110432,198.51.100.8,10.5.16.4,48495,8088,T,I,D,B,,,,"
338338
]
339339
}
340340
]
@@ -345,10 +345,10 @@ Here's an example format of a version 2 NSG flow log:
345345
{
346346
"mac": "000D3AF87856",
347347
"flowTuples": [
348-
"1542110377,10.5.16.4,13.67.143.118,59831,443,T,O,A,B,,,,",
349-
"1542110379,10.5.16.4,13.67.143.117,59932,443,T,O,A,E,1,66,1,66",
350-
"1542110379,10.5.16.4,13.67.143.115,44931,443,T,O,A,C,30,16978,24,14008",
351-
"1542110406,10.5.16.4,40.71.12.225,59929,443,T,O,A,E,15,8489,12,7054"
348+
"1542110377,10.5.16.4,203.0.113.118,59831,443,T,O,A,B,,,,",
349+
"1542110379,10.5.16.4,203.0.113.117,59932,443,T,O,A,E,1,66,1,66",
350+
"1542110379,10.5.16.4,203.0.113.115,44931,443,T,O,A,C,30,16978,24,14008",
351+
"1542110406,10.5.16.4,198.51.100.225,59929,443,T,O,A,E,15,8489,12,7054"
352352
]
353353
}
354354
]
@@ -358,7 +358,7 @@ Here's an example format of a version 2 NSG flow log:
358358
},
359359
{
360360
"time": "2018-11-13T12:01:35.3918317Z",
361-
"systemId": "a0fca5ce-022c-47b1-9735-89943b42f2fa",
361+
"systemId": "66aa66aa-bb77-cc88-dd99-00ee00ee00ee",
362362
"category": "NetworkSecurityGroupFlowEvent",
363363
"resourceId": "/SUBSCRIPTIONS/00000000-0000-0000-0000-000000000000/RESOURCEGROUPS/FABRIKAMRG/PROVIDERS/MICROSOFT.NETWORK/NETWORKSECURITYGROUPS/FABRIAKMVM1-NSG",
364364
"operationName": "NetworkSecurityGroupFlowEvents",

0 commit comments

Comments
 (0)