Skip to content

Commit 8931568

Browse files
committed
tweaks
1 parent 3a90ef6 commit 8931568

File tree

1 file changed

+22
-19
lines changed

1 file changed

+22
-19
lines changed

articles/network-watcher/vnet-flow-logs-portal.md

Lines changed: 22 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -161,27 +161,29 @@ Use [New-AzNetworkWatcherFlowLog](/powershell/module/az.network/new-aznetworkwat
161161

162162
```azurepowershell-interactive
163163
# Place the virtual network configuration into a variable.
164-
$vnet = Get-AzVirtualNetwork -Name myVNet -ResourceGroupName myResourceGroup
164+
$vnet = Get-AzVirtualNetwork -Name 'myVNet' -ResourceGroupName 'myResourceGroup'
165+
165166
# Place the storage account configuration into a variable.
166-
$storageAccount = Get-AzStorageAccount -Name myStorageAccount -ResourceGroupName myResourceGroup
167+
$storageAccount = Get-AzStorageAccount -Name 'myStorageAccount' -ResourceGroupName 'myResourceGroup'
167168
168169
# Create a VNet flow log.
169-
New-AzNetworkWatcherFlowLog -Enabled $true -Name myVNetFlowLog -NetworkWatcherName NetworkWatcher_eastus -ResourceGroupName NetworkWatcherRG -StorageId $storageAccount.Id -TargetResourceId $vnet.Id -FormatVersion 2
170+
New-AzNetworkWatcherFlowLog -Enabled $true -Name 'myVNetFlowLog' -NetworkWatcherName 'NetworkWatcher_eastus' -ResourceGroupName 'NetworkWatcherRG' -StorageId $storageAccount.Id -TargetResourceId $vnet.Id -FormatVersion 2
170171
```
171172

172173
### Enable virtual network flow logs and traffic analytics
173174

174175
```azurepowershell-interactive
175176
# Place the virtual network configuration into a variable.
176-
$vnet = Get-AzVirtualNetwork -Name myVNet -ResourceGroupName myResourceGroup
177+
$vnet = Get-AzVirtualNetwork -Name 'myVNet' -ResourceGroupName 'myResourceGroup'
178+
177179
# Place the storage account configuration into a variable.
178-
$storageAccount = Get-AzStorageAccount -Name myStorageAccount -ResourceGroupName myResourceGroup
180+
$storageAccount = Get-AzStorageAccount -Name 'myStorageAccount' -ResourceGroupName 'myResourceGroup'
179181
180182
# Create a traffic analytics workspace and place its configuration into a variable.
181-
$workspace = New-AzOperationalInsightsWorkspace -Name myWorkspace -ResourceGroupName myResourceGroup -Location EastUS
183+
$workspace = New-AzOperationalInsightsWorkspace -Name 'myWorkspace' -ResourceGroupName 'myResourceGroup' -Location 'EastUS'
182184
183185
# Create a VNet flow log.
184-
New-AzNetworkWatcherFlowLog -Enabled $true -Name myVNetFlowLog -NetworkWatcherName NetworkWatcher_eastus -ResourceGroupName NetworkWatcherRG -StorageId $storageAccount.Id -TargetResourceId $vnet.Id -FormatVersion 2 -EnableTrafficAnalytics -TrafficAnalyticsWorkspaceId $workspace.ResourceId -TrafficAnalyticsInterval 10
186+
New-AzNetworkWatcherFlowLog -Enabled $true -Name 'myVNetFlowLog' -NetworkWatcherName 'NetworkWatcher_eastus' -ResourceGroupName 'NetworkWatcherRG' -StorageId $storageAccount.Id -TargetResourceId $vnet.Id -FormatVersion 2 -EnableTrafficAnalytics -TrafficAnalyticsWorkspaceId $workspace.ResourceId -TrafficAnalyticsInterval 10
185187
```
186188

187189
# [**Azure CLI**](#tab/cli)
@@ -192,12 +194,12 @@ Use [az network watcher flow-log create](/cli/azure/network/watcher/flow-log#az-
192194

193195
```azurecli-interactive
194196
# Create a VNet flow log.
195-
az network watcher flow-log create --location 'eastus' --resource-group 'myResourceGroup' --name 'myVNetFlowLog' --vnet myVNet --storage-account 'myStorageAccount'
197+
az network watcher flow-log create --location 'eastus' --resource-group 'myResourceGroup' --name 'myVNetFlowLog' --vnet 'myVNet' --storage-account 'myStorageAccount'
196198
```
197199

198200
```azurecli-interactive
199201
# Create a VNet flow log (storage account is in a different resource group from the virtual network).
200-
az network watcher flow-log create --location 'eastus' --resource-group 'myResourceGroup' --name 'myVNetFlowLog' --vnet myVNet --storage-account '/subscriptions/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e/resourceGroups/StorageRG/providers/Microsoft.Storage/storageAccounts/myStorageAccount'
202+
az network watcher flow-log create --location 'eastus' --resource-group 'myResourceGroup' --name 'myVNetFlowLog' --vnet 'myVNet' --storage-account '/subscriptions/aaaa0a0a-bb1b-cc2c-dd3d-eeeeee4e4e4e/resourceGroups/StorageRG/providers/Microsoft.Storage/storageAccounts/myStorageAccount'
201203
```
202204

203205
### Enable virtual network flow logs and traffic analytics
@@ -267,7 +269,7 @@ To enable traffic analytics on a flow log resource, use [Set-AzNetworkWatcherFlo
267269
$vnet = Get-AzVirtualNetwork -Name 'myVNet' -ResourceGroupName 'myResourceGroup'
268270
269271
# Place the storage account configuration into a variable.
270-
$storageAccount = Get-AzStorageAccount -Name 'mynwstorageaccount' -ResourceGroupName 'Storage'
272+
$storageAccount = Get-AzStorageAccount -Name 'myStorageAccount' -ResourceGroupName 'myResourceGroup'
271273
272274
# Place the workspace configuration into a variable.
273275
$workspace = Get-AzOperationalInsightsWorkspace -Name 'myWorkspace' -ResourceGroupName 'myResourceGroup'
@@ -279,13 +281,13 @@ To disable traffic analytics on the flow log resource and continue to generate a
279281
280282
```azurepowershell-interactive
281283
# Place the virtual network configuration into a variable.
282-
$vnet = Get-AzVirtualNetwork -Name myVNet -ResourceGroupName myResourceGroup
284+
$vnet = Get-AzVirtualNetwork -Name 'myVNet' -ResourceGroupName 'myResourceGroup'
283285
284286
# Place the storage account configuration into a variable.
285-
$storageAccount = Get-AzStorageAccount -Name mynwstorageaccount -ResourceGroupName Storage
287+
$storageAccount = Get-AzStorageAccount -Name 'myStorageAccount' -ResourceGroupName 'myResourceGroup'
286288
287289
# Update the VNet flow log.
288-
Set-AzNetworkWatcherFlowLog -Enabled $true -Name myVNetFlowLog -NetworkWatcherName NetworkWatcher_eastus -ResourceGroupName NetworkWatcherRG -StorageId $storageAccount.Id -TargetResourceId $vnet.Id -FormatVersion 2
290+
Set-AzNetworkWatcherFlowLog -Enabled $true -Name 'myVNetFlowLog' -NetworkWatcherName 'NetworkWatcher_eastus' -ResourceGroupName 'NetworkWatcherRG' -StorageId $storageAccount.Id -TargetResourceId $vnet.Id -FormatVersion 2
289291
```
290292

291293
# [**Azure CLI**](#tab/cli)
@@ -455,13 +457,13 @@ Use [Set-AzNetworkWatcherFlowLog](/powershell/module/az.network/set-aznetworkwat
455457
456458
```azurepowershell-interactive
457459
# Place the virtual network configuration into a variable.
458-
$vnet = Get-AzVirtualNetwork -Name myVNet -ResourceGroupName myResourceGroup
460+
$vnet = Get-AzVirtualNetwork -Name 'myVNet' -ResourceGroupName 'myResourceGroup'
459461
460462
# Place the storage account configuration into a variable.
461-
$storageAccount = Get-AzStorageAccount -Name mynwstorageaccount -ResourceGroupName Storage
463+
$storageAccount = Get-AzStorageAccount -Name 'myStorageAccount' -ResourceGroupName 'myResourceGroup'
462464
463465
# Disable the VNet flow log.
464-
Set-AzNetworkWatcherFlowLog -Enabled $false -Name myVNetFlowLog -NetworkWatcherName NetworkWatcher_eastus -ResourceGroupName NetworkWatcherRG -StorageId $storageAccount.Id -TargetResourceId $vnet.Id
466+
Set-AzNetworkWatcherFlowLog -Enabled $false -Name 'myVNetFlowLog' -NetworkWatcherName 'NetworkWatcher_eastus' -ResourceGroupName 'NetworkWatcherRG' -StorageId $storageAccount.Id -TargetResourceId $vnet.Id
465467
```
466468

467469
> [!NOTE]
@@ -473,7 +475,7 @@ Use [az network watcher flow-log update](/cli/azure/network/watcher/flow-log#az-
473475

474476
```azurecli-interactive
475477
# Update the VNet flow log.
476-
az network watcher flow-log update --enabled 'false' --location 'eastus' --name 'myVNetFlowLog' --resource-group 'myResourceGroup' --vnet 'myVNet' --storage-account 'myStorageAccount'
478+
az network watcher flow-log update --enabled false --location 'eastus' --name 'myVNetFlowLog' --resource-group 'myResourceGroup' --vnet 'myVNet' --storage-account 'myStorageAccount'
477479
```
478480

479481
> [!NOTE]
@@ -522,5 +524,6 @@ az network watcher flow-log delete --name 'myVNetFlowLog' --location 'eastus'
522524
523525
## Related content
524526

525-
- To learn about traffic analytics, see [Traffic analytics](traffic-analytics.md).
526-
- To learn how to use Azure built-in policies to audit or enable traffic analytics, see [Manage traffic analytics using Azure Policy](traffic-analytics-policy-portal.md).
527+
- [Audit and deploy virtual network flow logs using Azure Policy](vnet-flow-logs-policy.md)
528+
- [Virtual network flow logs](vnet-flow-logs-overview.md)
529+
- [Traffic analytics](traffic-analytics.md)

0 commit comments

Comments
 (0)