Skip to content

Commit 274a936

Browse files
committed
update flow logs section
1 parent 0f9691b commit 274a936

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

articles/network-watcher/frequently-asked-questions.yml

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ metadata:
66
ms.author: halkazwini
77
ms.service: azure-network-watcher
88
ms.topic: faq
9-
ms.date: 03/10/2025
9+
ms.date: 06/01/2025
1010
title: "Network Watcher frequently asked questions (FAQ)"
1111
summary: |
1212
This article provides answers to the most frequently asked questions about Azure Network Watcher.
@@ -35,7 +35,7 @@ sections:
3535
* [Packet capture](network-watcher-packet-capture-overview.md) enables you to capture your virtual machine traffic.
3636
* [VPN troubleshoot](network-watcher-troubleshoot-overview.md) runs multiple diagnostics checks on your VPN gateways and connections to help debug issues.
3737
* Traffic
38-
* [Network security group flow logs](network-watcher-nsg-flow-logging-overview.md) and [virtual network flow logs](vnet-flow-logs-overview.md) allow you to log network traffic passing through your network security groups (NSGs) and virtual networks respectively.
38+
* [Virtual network flow logs](vnet-flow-logs-overview.md) and [network security group flow logs](network-watcher-nsg-flow-logging-overview.md) allow you to log network traffic passing through your virtual networks and network security groups (NSGs) respectively.
3939
* [Traffic analytics](traffic-analytics.md) processes your network security group flow log data enabling you to visualize, query, analyze, and understand your network traffic.
4040
4141
For more detailed information, see [Network Watcher overview](network-watcher-overview.md).
@@ -223,14 +223,14 @@ sections:
223223
Yes, you can use a storage account from a different subscription as long as this subscription is in the same region of the network security group and associated with the same Microsoft Entra tenant of the network security group or virtual network's subscription.
224224
225225
- question: |
226-
How do I use network security group flow logs with a storage account behind a firewall?
226+
How do I use flow logs with a storage account behind a firewall?
227227
answer: |
228228
To use a storage account behind a firewall, you have to provide an exception for Trusted Microsoft Services to access your storage account:
229229
230230
1. Go to the storage account by entering the storage account's name in the search box at the top of the portal.
231231
2. Under the **Security + networking**, select **Networking**, then select **Firewalls and virtual networks**.
232232
3. In **Public network access**, select **Enabled from selected virtual networks and IP addresses**. Then under **Exceptions**, check the box next to **Allow Azure services on the trusted services list to access this storage account.**
233-
4. Enable network security group flow logs by creating a flow log for your target network security group using the storage account. For more information, see [Create a flow log](nsg-flow-logging.md#create-a-flow-log).
233+
4. Enable flow logs by creating a flow log for your target resource using the storage account. For more information, see [Create a flow log](vnet-flow-logs-manage#create-a-flow-log).
234234
235235
You can check the storage logs after a few minutes. You should see an updated TimeStamp or a new JSON file created.
236236
@@ -240,14 +240,14 @@ sections:
240240
Network Watcher has a built-in fallback mechanism that it uses when connecting to a storage account behind a firewall (firewall enabled). It tries to connect to the storage account using a key, and if that fails, it switches to a token. In this case, a 403 error is logged in the storage account activity log.
241241
242242
- question: |
243-
Can Network Watcher send network security group flow logs data to a storage account enabled with Private Endpoint?
243+
Can Network Watcher send flow logs data to a storage account enabled with Private Endpoint?
244244
answer: |
245-
Yes, Network Watcher supports sending network security group flow logs data to a storage account enabled with a private endpoint.
245+
Yes, Network Watcher supports sending flow logs data to a storage account enabled with a private endpoint.
246246
247247
- question: |
248-
How do I use network security group flow logs with a storage account behind a Service Endpoint?
248+
How do I use flow logs with a storage account behind a service endpoint?
249249
answer: |
250-
Network security group flow logs are compatible with Service Endpoints without requiring any extra configuration. For more information, see [Enable a service endpoint](../virtual-network/tutorial-restrict-network-access-to-resources.md#enable-a-service-endpoint).
250+
Flow logs are compatible with service endpoints without requiring any extra configuration. For more information, see [Enable a service endpoint](../virtual-network/tutorial-restrict-network-access-to-resources.md#enable-a-service-endpoint).
251251
252252
- question: |
253253
What is the difference between flow logs versions 1 and 2?

0 commit comments

Comments
 (0)