Skip to content

Commit 7eedc8a

Browse files
authored
Update traffic-analytics-schema.md
Updated traffic analytics schema field definitions relevant to IP 168.63.129.16
1 parent 3fcfce8 commit 7eedc8a

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

articles/network-watcher/traffic-analytics-schema.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
---
22
title: Azure traffic analytics schema | Microsoft Docs
33
description: Understand schema of Traffic Analytics to analyze Azure network security group flow logs.
4-
author: vinynigam
5-
manager: agummadi
4+
author: harshacs
5+
manager: vinynigam
66
ms.service: network-watcher
77
ms.topic: article
88
ms.workload: infrastructure-services
@@ -173,8 +173,8 @@ Below is the schema for public ip details:
173173
| FlowIntervalEndTime_t | Date and Time in UTC | End time of the flow log processing interval |
174174
| FlowType_s | * AzurePublic <br> * ExternalPublic <br> * MaliciousFlow | Definition in notes below the table |
175175
| IP | Public IP | Public IP whose information is provided in the record |
176-
| Location | Location of the IP | - For Azure Public IP: Azure region of virtual network/network interface/virtual machine to which the IP belongs to <br> - For External Public IP and Malicious IP: 2-letter country code where IP is located (ISO 3166-1 alpha-2) |
177-
| PublicIPDetails | Information about IP | - For AzurePublic IP: Azure Service behind the IP <br> - ExternalPublic/Malicious IP: WhoIS information of the IP |
176+
| Location | Location of the IP | - For Azure Public IP: Azure region of virtual network/network interface/virtual machine to which the IP belongs OR Global for IP [168.63.129.16](../virtual-network/what-is-ip-address-168-63-129-16.md) <br> - For External Public IP and Malicious IP: 2-letter country code where IP is located (ISO 3166-1 alpha-2) |
177+
| PublicIPDetails | Information about IP | - For AzurePublic IP: Azure Service owning the IP OR "Microsoft Virtual Public IP" for IP [168.63.129.16](../virtual-network/what-is-ip-address-168-63-129-16.md) <br> - ExternalPublic/Malicious IP: WhoIS information of the IP |
178178
| ThreatType | Threat posed by malicious IP | **For Malicious IPs only**: One of the threats from the list of currently allowed values (described below) |
179179
| ThreatDescription | Description of the threat | **For Malicious IPs only**: Description of the threat posed by the malicious IP |
180180
| DNSDomain | DNS domain | **For Malicious IPs only**: Domain name associated with this IP |

0 commit comments

Comments
 (0)