You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/network-watcher/traffic-analytics-schema.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ author: halkazwini
6
6
ms.author: halkazwini
7
7
ms.service: network-watcher
8
8
ms.topic: concept-article
9
-
ms.date: 08/24/2023
9
+
ms.date: 08/25/2023
10
10
#CustomerIntent: As a administrator, I want learn about traffic analytics schema so I can easily use the queries and understand their output.
11
11
---
12
12
@@ -138,9 +138,9 @@ The following table lists the fields in the schema and what they signify for NSG
138
138
|**Subnet2_s**|\<ResourceGroup_Name\>/<VirtualNetwork_Name\>/\<SubnetName\>| Subnet associated with the Destination IP in the flow. |
139
139
|**ApplicationGateway1_s**|\<SubscriptionID\>/\<ResourceGroupName\>/\<ApplicationGatewayName\>| Application gateway associated with the Source IP in the flow. |
140
140
|**ApplicationGateway2_s**|\<SubscriptionID\>/\<ResourceGroupName\>/\<ApplicationGatewayName\>| Application gateway associated with the Destination IP in the flow. |
141
-
|**ExpressRouteCircuit1**|\<SubscriptionID\>/\<ResourceGroupName\>/\<ExpressRouteCircuitName\>| ExpressRoute circuit ID - when flow is sent from site via ExpressRoute. |
142
-
|**ExpressRouteCircuit2**|\<SubscriptionID\>/\<ResourceGroupName\>/\<ExpressRouteCircuitName\>| ExpressRoute circuit ID - when flow is received from cloud by ExpressRoute. |
143
-
|**ExpressRouteCircuitPeeringType**| - AzurePrivatePeering <br> - AzurePublicPeering <br> - MicrosoftPeering | ExpressRoute peering type involved in the flow. |
141
+
|**ExpressRouteCircuit1_s**|\<SubscriptionID\>/\<ResourceGroupName\>/\<ExpressRouteCircuitName\>| ExpressRoute circuit ID - when flow is sent from site via ExpressRoute. |
142
+
|**ExpressRouteCircuit2_s**|\<SubscriptionID\>/\<ResourceGroupName\>/\<ExpressRouteCircuitName\>| ExpressRoute circuit ID - when flow is received from cloud by ExpressRoute. |
143
+
|**ExpressRouteCircuitPeeringType_s**| - AzurePrivatePeering <br> - AzurePublicPeering <br> - MicrosoftPeering | ExpressRoute peering type involved in the flow. |
144
144
|**LoadBalancer1_s**|\<SubscriptionID\>/\<ResourceGroupName\>/\<LoadBalancerName\>| Load balancer associated with the Source IP in the flow. |
145
145
|**LoadBalancer2_s**|\<SubscriptionID\>/\<ResourceGroupName\>/\<LoadBalancerName\>| Load balancer associated with the Destination IP in the flow. |
146
146
|**LocalNetworkGateway1_s**|\<SubscriptionID\>/\<ResourceGroupName\>/\<LocalNetworkGatewayName\>| Local network gateway associated with the Source IP in the flow. |
@@ -163,7 +163,7 @@ The following table lists the fields in the schema and what they signify for NSG
163
163
|**PublicIPs_s**| <PUBLIC_IP>\|\<FLOW_STARTED_COUNT>\|\<FLOW_ENDED_COUNT>\|\<OUTBOUND_PACKETS>\|\<INBOUND_PACKETS>\|\<OUTBOUND_BYTES>\|\<INBOUND_BYTES> | Entries separated by bars. |
164
164
|**SrcPublicIPs_s**| <SOURCE_PUBLIC_IP>\|\<FLOW_STARTED_COUNT>\|\<FLOW_ENDED_COUNT>\|\<OUTBOUND_PACKETS>\|\<INBOUND_PACKETS>\|\<OUTBOUND_BYTES>\|\<INBOUND_BYTES> | Entries separated by bars. |
165
165
|**DestPublicIPs_s**| <DESTINATION_PUBLIC_IP>\|\<FLOW_STARTED_COUNT>\|\<FLOW_ENDED_COUNT>\|\<OUTBOUND_PACKETS>\|\<INBOUND_PACKETS>\|\<OUTBOUND_BYTES>\|\<INBOUND_BYTES> | Entries separated by bars. |
166
-
|**IsFlowCapturedAtUDRHop**| - True <br> - False | If the flow was captured at a UDR hop, the value is True. |
166
+
|**IsFlowCapturedAtUDRHop_b**| - True <br> - False | If the flow was captured at a UDR hop, the value is True. |
167
167
168
168
> [!IMPORTANT]
169
169
> The traffic analytics schema was updated on August 22, 2019. The new schema provides source and destination IPs separately, removing the need to parse the `FlowDirection` field so that queries are simpler. The updated schema had the following changes:
0 commit comments