Skip to content

Commit 68619b4

Browse files
authored
Merge pull request #252608 from MicrosoftDocs/release-ga-expressroute-traffic-collector
Release ga expressroute traffic collector --scheduled release at 4AM of 9/25
2 parents 6b2f1b6 + a1fcb6c commit 68619b4

File tree

2 files changed

+79
-41
lines changed

2 files changed

+79
-41
lines changed
Lines changed: 27 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -1,51 +1,49 @@
11
---
2-
title: 'Configure ExpressRoute Traffic Collector for ExpressRoute Direct using the Azure portal (Preview)'
3-
description: Learn how to create an ExpressRoute Traffic Collector resource to import logs into a Log Analytics workspace.
2+
title: Configure Traffic Collector for ExpressRoute Direct
3+
titleSuffix: Azure ExpressRoute
4+
description: This article shows you how to create an ExpressRoute Traffic Collector resource and import logs into a Log Analytics workspace.
45
services: expressroute
56
author: duongau
67
ms.service: expressroute
7-
ms.topic: tutorial
8-
ms.date: 07/15/2022
8+
ms.topic: how-to
9+
ms.date: 08/09/2023
910
ms.author: duau
11+
#Customer intent: As a network engineer, I want to configure ExpressRoute Traffic Collector to import flow logs into a Log Analytics workspace.
1012
---
1113

12-
# Configure ExpressRoute Traffic Collector for ExpressRoute Direct using the Azure portal (Preview)
14+
# Configure Traffic Collector for ExpressRoute Direct
1315

14-
This article will help you deploy an ExpressRoute Traffic Collector using the Azure portal. You'll learn how to add and remove an ExpressRoute Traffic Collector, associate it to an ExpressRoute Direct circuit and Log Analytics workspace. Once the ExpressRoute Traffic Collector is deployed, sampled flow logs will get imported into a Log Analytics workspace. For more information, see [About ExpressRoute Traffic Collector](traffic-collector.md).
16+
This article helps you deploy an ExpressRoute Traffic Collector using the Azure portal. You learn how to add and remove an ExpressRoute Traffic Collector, associate it to an ExpressRoute Direct circuit and Log Analytics workspace. Once the ExpressRoute Traffic Collector is deployed, sampled flow logs get imported into a Log Analytics workspace. For more information, see [About ExpressRoute Traffic Collector](traffic-collector.md).
1517

16-
> [!IMPORTANT]
17-
> ExpressRoute Traffic Collector is currently in PREVIEW.
18-
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
18+
## Prerequisites
19+
20+
- An ExpressRoute Direct circuit with Private or Microsoft peering configured.
21+
- A Log Analytics workspace (Create new or use existing workspace).
1922

2023
## Limitations
2124

2225
- ExpressRoute Traffic Collector supports a maximum ExpressRoute Direct circuit size of 100 Gbps.
23-
- You can associate up to 20 ExpressRoute Direct circuits with ExpressRoute Traffic Collector as long as the total circuit bandwidth doesn't exceed 100 Gbps.
24-
25-
## Prerequisites
26-
27-
- ExpressRoute Direct circuit with Private or Microsoft peering configured.
28-
- A Log Analytics workspace (Create new or use existing).
26+
- You can associate up to 20 ExpressRoute Direct circuits with ExpressRoute Traffic Collector. The total circuit bandwidth can't exceed 100 Gbps.
27+
- The ExpressRoute Direct circuit, Traffic Collector and the Log Analytics workspace must be in the same geo-political region. Cross geo-political resource association isn't supported.
28+
- The ExpressRoute Direct circuit and Traffic Collector must be deployed in the same subscription. Cross subscription deployments aren't available.
2929

3030
> [!NOTE]
31-
> - The ExpressRoute Direct circuit, ExpressRoute Traffic Collector and the Log Analytics workspace must be in the same geo-political region. Cross geo-political resource association is not supported.
32-
> - The ExpressRoute Direct circuit and ExpressRoute Traffic Collector must be deployed in the same subscription. Cross subscription deployment is currently not available.
33-
> - Log Analytics and ExpressRoute Traffic Collector can be deployed in cross subscription.
31+
> - Log Analytics and ExpressRoute Traffic Collector can be deployed in a different subscription.
3432
> - When ExpressRoute Traffic Collector gets deployed in an Azure region that supports availability zones, it will have availability zone enabled by default.
3533
3634
## Permissions
3735

38-
- Minimum contributor access is required to deploy ExpressRoute Traffic Collector.
39-
- Minimum contributor access is required to associate ExpressRoute Direct circuit with ExpressRoute Traffic Collector.
40-
- Monitor contributor role is required to associate Log Analytics workspace with ExpressRoute Traffic Collector.
36+
- Minimum of **contributor** access is required to deploy ExpressRoute Traffic Collector.
37+
- Minimum of **contributor** access is required to associate ExpressRoute Direct circuit with ExpressRoute Traffic Collector.
38+
- **Monitor contributor** role is required to associate Log Analytics workspace with ExpressRoute Traffic Collector.
4139

4240
For more information, see [Identity and access management](../active-directory/fundamentals/active-directory-ops-guide-iam.md).
4341

4442
## Deploy ExpressRoute Traffic Collector
4543

46-
1. Sign in to the [Azure portal](https://portal.azure.com/)
44+
1. Sign in to the [Azure portal](https://portal.azure.com/).
4745

48-
1. In the portal, go to the list of ExpressRoute circuits and select **ExpressRoute Traffic Collectors**. Then select **+ Create new**.
46+
1. In the portal, go to the ExpressRoute circuits page and select **ExpressRoute Traffic Collectors** from the top of the page. Select **+ Create new** from the drop-down menu.
4947

5048
:::image type="content" source="./media/how-to-configure-traffic-collector/circuit-list.png" alt-text="Screenshot of the create new ExpressRoute Traffic Collector button from the ExpressRoute circuit list page.":::
5149

@@ -61,11 +59,13 @@ For more information, see [Identity and access management](../active-directory/f
6159
| Region | Select a region to deploy this resource into. This resource needs to be in the same geo-political region as the Log Analytics workspace and the ExpressRoute Direct circuits. |
6260
| Collector Policy | This value is automatically filled in as **Default**. |
6361

64-
1. On the **Select ExpressRoute circuit** tab, select **+ Add ExpressRoute Circuits**. Select the checkbox next to the circuit you would like to add to the Traffic Collector and then select **Add**. Once you're satisfied with the circuits added, select **Next**.
62+
1. On the **Select ExpressRoute circuit** tab, select **+ Add ExpressRoute Circuits**.
63+
64+
1. On the **Add Circuits** page, select the checkbox next to the circuit you would like Traffic Collector to monitor and then select **Add**. Select **Next** to configure where logs gets forwarded to.
6565

6666
:::image type="content" source="./media/how-to-configure-traffic-collector/select-circuits.png" alt-text="Screenshot of the select ExpressRoute circuits tab and add circuits page.":::
6767

68-
1. On the **Forward Logs** tab, select the checkbox for **Send to Log Analytics workspace**. You can create a new Log Analytics workspace or choose an existing. The workspace can be in a different Azure subscription but has to be in the same geo-political region. Select **Next** once a workspace has been chosen.
68+
1. On the **Forward Logs** tab, select the checkbox for **Send to Log Analytics workspace**. You can create a new Log Analytics workspace or select an existing one. The workspace can be in a different Azure subscription but has to be in the same geo-political region. Select **Next** once a workspace has been chosen.
6969

7070
:::image type="content" source="./media/how-to-configure-traffic-collector/forward-logs.png" alt-text="Screenshot of the forward logs tab to Logs Analytics workspace.":::
7171

@@ -91,6 +91,6 @@ Once all circuits have been removed from the ExpressRoute Traffic Collector, sel
9191

9292
:::image type="content" source="./media/how-to-configure-traffic-collector/overview.png" alt-text="Screenshot of delete button on overview page." lightbox="./media/how-to-configure-traffic-collector/overview.png":::
9393

94-
## Next steps
94+
## Next step
9595

96-
- [ExpressRoute Traffic Collector Metrics](expressroute-monitoring-metrics-alerts.md#expressroute-traffic-collector-metrics)
96+
- Learn about [ExpressRoute Traffic Collector metrics](expressroute-monitoring-metrics-alerts.md#expressroute-traffic-collector-metrics) to monitor your ExpressRoute Traffic Collector resource.

articles/expressroute/traffic-collector.md

Lines changed: 52 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,28 +1,25 @@
11
---
2-
title: Enable flow logging using Azure ExpressRoute Traffic Collector (Preview)
3-
description: Learn about ExpressRoute Traffic Collector and the different use cases where this feature will be helpful.
2+
title: Azure ExpressRoute Traffic Collector
3+
titleSuffix: Azure ExpressRoute
4+
description: Learn about ExpressRoute Traffic Collector and the different use cases where this feature is helpful.
45
services: expressroute
56
author: duongau
67
ms.service: expressroute
78
ms.topic: conceptual
8-
ms.date: 08/02/2022
9+
ms.date: 08/21/2023
910
ms.author: duau
1011
ms.custom: references_regions
1112
---
1213

13-
# Enable flow logging using ExpressRoute Traffic Collector (Preview)
14+
# Azure ExpressRoute Traffic Collector
1415

15-
ExpressRoute Traffic Collector enables sampling of network flows sent over your ExpressRoute Direct circuits. Flow logs get sent to a [Log Analytics workspace](../azure-monitor/logs/log-analytics-overview.md) where you can create your own log queries for further analysis, export the data to any visualization tool or SIEM (Security Information and Event Management) of your choice. Flow logging can be enabled for both private peering and Microsoft peering with ExpressRoute Traffic Collector.
16-
17-
> [!IMPORTANT]
18-
> ExpressRoute Traffic Collector is currently in PREVIEW.
19-
> See the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
16+
ExpressRoute Traffic Collector enables sampling of network flows sent over your ExpressRoute Direct circuits. Flow logs get sent to a [Log Analytics workspace](../azure-monitor/logs/log-analytics-overview.md) where you can create your own log queries for further analysis. You can also export the data to any visualization tool or SIEM (Security Information and Event Management) of your choice. Flow logs can be enabled for both private peering and Microsoft peering with ExpressRoute Traffic Collector.
2017

2118
:::image type="content" source="./media/traffic-collector/main-diagram.png" alt-text="Diagram of ExpressRoute traffic collector in an Azure environment.":::
2219

2320
## Use cases
2421

25-
Flow logs can help you derive various traffic insights. Most common use cases are:
22+
Flow logs can help you look into various traffic insights. Some common use cases are:
2623

2724
### Network monitoring
2825

@@ -44,7 +41,7 @@ Flow logs can help you derive various traffic insights. Most common use cases ar
4441

4542
## Flow log collection and sampling
4643

47-
ExpressRoute Traffic Collector enables flow collection for Azure private peering and Microsoft peering. Flow logs are collected every minute. All packets collected for a given flow gets aggregated and imported into a Log Analytics workspace for further analysis. During flow collection, not every packet is captured into its own flow record. ExpressRoute Traffic Collector uses a sampling rate of 1:4096, meaning 1 out of every 4096 packets gets captured. Therefore, sampling rate short flows (in total bytes) may not get collected. This sampling size doesn't affect network traffic analysis when sampled data is aggregated over a longer period of time. Flow collection time and sampling rate are fixed and can't be changed.
44+
Flow logs are collected at an interval of every 1 minute. All packets collected for a given flow get aggregated and imported into a Log Analytics workspace for further analysis. During flow collection, not every packet is captured into its own flow record. ExpressRoute Traffic Collector uses a sampling rate of 1:4096, meaning 1 out of every 4096 packets gets captured. Therefore, sampling rate short flows (in total bytes) may not get collected. This sampling size doesn't affect network traffic analysis when sampled data is aggregated over a longer period of time. Flow collection time and sampling rate are fixed and can't be changed.
4845

4946
## Flow log schema
5047

@@ -95,16 +92,57 @@ ExpressRoute Traffic Collector enables flow collection for Azure private peering
9592

9693
ExpressRoute Traffic Collector is supported in the following regions:
9794

95+
### North America
96+
- Canada East
97+
- Canada Central
9898
- Central US
99-
- East US
100-
- East US 2
99+
- Central US EUAP
101100
- North Central US
102101
- South Central US
103-
- West Central US
102+
- West Central US
103+
- East US
104+
- East US 2
104105
- West US
105106
- West US 2
106107
- West US 3
107108

109+
### South America
110+
- Brazil South
111+
- Brazil Southeast
112+
113+
### Europe
114+
- West Europe
115+
- North Europe
116+
- UK South
117+
- UK West
118+
- France Central
119+
- France South
120+
- Germany North
121+
- Sweden Central
122+
- Sweden South
123+
- Switzerland North
124+
- Switzerland West
125+
- Norway East
126+
- Norway West
127+
128+
### Asia
129+
- East Asia
130+
- Central India
131+
- South India
132+
- Japan West
133+
- Korea South
134+
- UAE North
135+
136+
### Africa
137+
- South Africa North
138+
- South Africa West
139+
140+
### Pacific
141+
- Australia Central
142+
- Australia Central 2
143+
- Australia East
144+
- Australia Southeast
145+
108146
## Next steps
109147

110148
- Learn how to [set up ExpressRoute Traffic Collector](how-to-configure-traffic-collector.md).

0 commit comments

Comments
 (0)