You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/network-watcher/network-watcher-visualize-nsg-flow-logs-open-source-tools.md
+4-8Lines changed: 4 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,16 +6,12 @@ services: network-watcher
6
6
author: halkazwini
7
7
ms.service: network-watcher
8
8
ms.topic: how-to
9
-
ms.date: 05/03/2023
9
+
ms.date: 05/31/2024
10
10
ms.author: halkazwini
11
-
ms.custom: engagement-fy23, linux-related-content
12
11
---
13
12
14
13
# Visualize Azure Network Watcher NSG flow logs using open source tools
15
14
16
-
> [!CAUTION]
17
-
> This article references CentOS, a Linux distribution that is nearing End Of Life (EOL) status. Please consider your use and planning accordingly. For more information, see the [CentOS End Of Life guidance](~/articles/virtual-machines/workloads/centos/centos-end-of-life.md).
18
-
19
15
Network Security Group flow logs provide information that can be used understand ingress and egress IP traffic on Network Security Groups. These flow logs show outbound and inbound flows on a per rule basis, the NIC the flow applies to, 5-tuple information about the flow (Source/Destination IP, Source/Destination Port, Protocol), and if the traffic was allowed or denied.
20
16
21
17
These flow logs can be difficult to manually parse and gain insights from. However, there are several open source tools that can help visualize this data. This article provides a solution to visualize these logs using the Elastic Stack, which allows you to quickly index and visualize your flow logs on a Kibana dashboard.
@@ -38,7 +34,7 @@ By connecting NSG flow logs with the Elastic Stack, we can create a Kibana dashb
38
34
39
35
#### Install Elasticsearch
40
36
41
-
The following instructions are used to install Elasticsearch in Ubuntu Azure VMs. For instructions about how to install elastic search in RHEL/CentOS distributions, see [Install Elasticsearch with RPM](https://www.elastic.co/guide/en/elasticsearch/reference/8.6/rpm.html).
37
+
The following instructions are used to install Elasticsearch in Ubuntu Azure VMs. For instructions on how to install elastic search in Red Hat Enterprise Linux, see [Install Elasticsearch with RPM](https://www.elastic.co/guide/en/elasticsearch/reference/8.6/rpm.html).
42
38
43
39
1. The Elastic Stack from version 5.0 and above requires Java 8. Run the command `java -version` to check your version. If you don't have Java installed, see the documentation on the [Azure-suppored JDKs](/azure/developer/java/fundamentals/java-support-on-azure).
44
40
2. Download the correct binary package for your system:
@@ -78,7 +74,7 @@ For further instructions on installing Elastic search, see [Installation instruc
78
74
79
75
### Install Logstash
80
76
81
-
The following instructions are used to install Logstash in Ubuntu. For instructions about how to install this package inRHEL/CentOS, see the [Installing from Package Repositories - yum](https://www.elastic.co/guide/en/logstash/8.7/installing-logstash.html#_yum) article.
77
+
The following instructions are used to install Logstash in Ubuntu. For instructions on how to install this package inRed Hat Enterprise Linux, see the [Installing from Package Repositories - yum](https://www.elastic.co/guide/en/logstash/8.7/installing-logstash.html#_yum) article.
82
78
83
79
1. To install Logstash run the following commands:
84
80
@@ -181,7 +177,7 @@ For more information about this plugin, see the [documentation](https://github.c
181
177
182
178
### Install Kibana
183
179
184
-
For instructions about how to install Kibana inRHEL/CentOS systems, see [Install Kibana with RPM](https://www.elastic.co/guide/en/kibana/current/rpm.html).
180
+
For instructions on how to install Kibana inRed Hat Enterprise Linux, see [Install Kibana with RPM](https://www.elastic.co/guide/en/kibana/current/rpm.html).
185
181
For instructions about how to install Kibana in Ubuntu/Debian systems using a repository package, see [Install Kibana from APT repository](https://www.elastic.co/guide/en/kibana/current/deb.html).
186
182
187
183
Then following instructions were tested in Ubuntu and could be used in different Linux distributions as they aren't Ubuntu specific.
0 commit comments