You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/network-watcher/traffic-analytics-schema.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,8 +1,8 @@
1
1
---
2
2
title: Azure traffic analytics schema | Microsoft Docs
3
3
description: Understand schema of Traffic Analytics to analyze Azure network security group flow logs.
4
-
author: vinynigam
5
-
manager: agummadi
4
+
author: harshacs
5
+
manager: vinynigam
6
6
ms.service: network-watcher
7
7
ms.topic: article
8
8
ms.workload: infrastructure-services
@@ -173,8 +173,8 @@ Below is the schema for public ip details:
173
173
| FlowIntervalEndTime_t | Date and Time in UTC | End time of the flow log processing interval |
174
174
| FlowType_s | * AzurePublic <br> * ExternalPublic <br> * MaliciousFlow | Definition in notes below the table |
175
175
| IP | Public IP | Public IP whose information is provided in the record |
176
-
| Location | Location of the IP | - For Azure Public IP: Azure region of virtual network/network interface/virtual machine to which the IP belongs to <br> - For External Public IP and Malicious IP: 2-letter country code where IP is located (ISO 3166-1 alpha-2) |
177
-
| PublicIPDetails | Information about IP | - For AzurePublic IP: Azure Service behind the IP <br> - ExternalPublic/Malicious IP: WhoIS information of the IP |
176
+
| Location | Location of the IP | - For Azure Public IP: Azure region of virtual network/network interface/virtual machine to which the IP belongs OR Global for IP [168.63.129.16](../virtual-network/what-is-ip-address-168-63-129-16.md) <br> - For External Public IP and Malicious IP: 2-letter country code where IP is located (ISO 3166-1 alpha-2) |
177
+
| PublicIPDetails | Information about IP | - For AzurePublic IP: Azure Service owning the IP OR "Microsoft Virtual Public IP" for IP [168.63.129.16](../virtual-network/what-is-ip-address-168-63-129-16.md) <br> - ExternalPublic/Malicious IP: WhoIS information of the IP |
178
178
| ThreatType | Threat posed by malicious IP |**For Malicious IPs only**: One of the threats from the list of currently allowed values (described below) |
179
179
| ThreatDescription | Description of the threat |**For Malicious IPs only**: Description of the threat posed by the malicious IP |
180
180
| DNSDomain | DNS domain |**For Malicious IPs only**: Domain name associated with this IP |
0 commit comments