You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/network-watcher/traffic-analytics-schema.md
+7-7Lines changed: 7 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ author: halkazwini
6
6
ms.author: halkazwini
7
7
ms.service: network-watcher
8
8
ms.topic: concept-article
9
-
ms.date: 05/03/2024
9
+
ms.date: 05/07/2024
10
10
11
11
#CustomerIntent: As a administrator, I want learn about traffic analytics schema so I can easily use the queries and understand their output.
12
12
---
@@ -198,8 +198,8 @@ The following table lists the fields in the schema and what they signify for vir
198
198
> |**DestPort**| Destination Port | Port at which traffic is incoming. |
199
199
> |**L4Protocol**| - T <br> - U | Transport Protocol. **T** = TCP <br> **U** = UDP |
200
200
> |**L7Protocol**| Protocol Name | Derived from destination port. |
201
-
> |**FlowDirection**| - **I** = Inbound <br> - **O** = Outbound | Direction of the flow: in or out of the network security group per flow log. |
202
-
> |**FlowStatus**| - **A** = Allowed <br> - **D** = Denied | Status of flow: allowed or denied by network security group per flow log. |
201
+
> |**FlowDirection**| - **I** = Inbound <br> - **O** = Outbound | Direction of the flow: in or out of the target resource per flow log. |
202
+
> |**FlowStatus**| - **A** = Allowed <br> - **D** = Denied | Status of flow: allowed or denied by target resource per flow log. |
203
203
> |**NSGList**|\<SUBSCRIPTIONID\>/\<RESOURCEGROUP_NAME\>/\<NSG_NAME\>| Network security group associated with the flow. |
204
204
> |**NSGRule**| NSG_RULENAME | Network security group rule that allowed or denied the flow. |
205
205
> |**NSGRuleType**| - User Defined <br> - Default | The type of network security group rule used by the flow. |
@@ -232,10 +232,10 @@ The following table lists the fields in the schema and what they signify for vir
232
232
> |**DeniedInFlows**| - | Count of inbound flows that were denied. (Inbound to the network interface at which the flow was captured). |
233
233
> |**AllowedOutFlows**| - | Count of outbound flows that were allowed (Outbound to the network interface at which the flow was captured). |
234
234
> |**DeniedOutFlows**| - | Count of outbound flows that were denied (Outbound to the network interface at which the flow was captured). |
235
-
> |**PacketsDestToSrc**| Represents packets sent from the destination to the source of the flow| Populated only for the Version 2 of network security group flow log schema. |
236
-
> |**PacketsSrcToDest**| Represents packets sent from the source to the destination of the flow | Populated only for the Version 2 of network security group flow log schema. |
237
-
> |**BytesDestToSrc**| Represents bytes sent from the destination to the source of the flow| Populated only for the Version 2 of network security group flow log schema. |
238
-
> |**BytesSrcToDest**| Represents bytes sent from the source to the destination of the flow| Populated only for the Version 2 of network security group flow log schema. |
235
+
> |**PacketsDestToSrc**|- |Represents packets sent from the destination to the source of the flow. |
236
+
> |**PacketsSrcToDest**|- |Represents packets sent from the source to the destination of the flow . |
237
+
> |**BytesDestToSrc**|- |Represents bytes sent from the destination to the source of the flow. |
238
+
> |**BytesSrcToDest**|- |Represents bytes sent from the source to the destination of the flow. |
239
239
> |**CompletedFlows**| - | Populated with nonzero value only for the Version 2 of network security group flow log schema. |
240
240
> |**SrcPublicIPs**|\<SOURCE_PUBLIC_IP\>\|\<FLOW_STARTED_COUNT\>\|\<FLOW_ENDED_COUNT\>\|\<OUTBOUND_PACKETS\>\|\<INBOUND_PACKETS\>\|\<OUTBOUND_BYTES\>\|\<INBOUND_BYTES\>| Entries separated by bars. |
241
241
> |**DestPublicIPs**| <DESTINATION_PUBLIC_IP>\|\<FLOW_STARTED_COUNT>\|\<FLOW_ENDED_COUNT>\|\<OUTBOUND_PACKETS>\|\<INBOUND_PACKETS>\|\<OUTBOUND_BYTES>\|\<INBOUND_BYTES> | Entries separated by bars. |
0 commit comments