You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/network-watcher/traffic-analytics-faq.yml
+9-9Lines changed: 9 additions & 9 deletions
Original file line number
Diff line number
Diff line change
@@ -30,7 +30,7 @@ sections:
30
30
Your account must meet one of the following to enable traffic analytics:
31
31
32
32
- Your account must have any one of the following Azure roles at the subscription scope: owner, contributor, or network contributor.
33
-
- If your account is not assigned to one of the previously listed roles, it must be assigned to a custom role that is assigned the following actions, at the subscription level.
33
+
- If your account isn't assigned to one of the previously listed roles, it must be assigned to a custom role that is assigned the following actions, at the subscription level.
34
34
35
35
- Microsoft.Network/applicationGateways/read
36
36
- Microsoft.Network/connections/read
@@ -45,7 +45,7 @@ sections:
45
45
46
46
To learn how to check roles assigned to a user for a subscription, see [List Azure role assignments using the Azure portal](../role-based-access-control/role-assignments-list-portal.md):
47
47
48
-
If you are not able to see the assignments, contact the respective subscription admin. For more information, see [Assign Azure roles using the Azure portal](../role-based-access-control/role-assignments-portal.md).
48
+
If you aren't able to see the assignments, contact the respective subscription admin. For more information, see [Assign Azure roles using the Azure portal](../role-based-access-control/role-assignments-portal.md).
49
49
50
50
- question: |
51
51
Can the network security groups I enable flow logs for be in different regions than my workspace?
@@ -60,7 +60,7 @@ sections:
60
60
- question: |
61
61
Can I use an existing workspace?
62
62
answer: |
63
-
Yes. If you select an existing workspace, make sure that it has been migrated to the new query language. If you do not want to upgrade the workspace, you need to create a new one. For more information about Kusto Query Language (KQL), see [Log queries in Azure Monitor](../azure-monitor/logs/log-query-overview.md).
63
+
Yes. If you select an existing workspace, make sure that it has been migrated to the new query language. If you don't want to upgrade the workspace, you need to create a new one. For more information about Kusto Query Language (KQL), see [Log queries in Azure Monitor](../azure-monitor/logs/log-query-overview.md).
64
64
65
65
- question: |
66
66
Can my Azure storage account be in one subscription and my Log Analytics workspace be in a different subscription?
@@ -80,7 +80,7 @@ sections:
80
80
- question: |
81
81
What if I'm getting the status, “Failed to load,” under the NSG flow logs page?
82
82
answer: |
83
-
The `Microsoft.Insights` provider must be registered for flow logging to work properly. If you are not sure whether the `Microsoft.Insights` provider is registered for your subscription, see [Azure portal](.//network-watcher-nsg-flow-logging-portal.md#register-insights-provider), [PowerShell](./network-watcher-nsg-flow-logging-powershell.md#register-insights-provider), or [Azure CLI](./network-watcher-nsg-flow-logging-cli.md#register-insights-provider) instructions on how to register it.
83
+
The `Microsoft.Insights` provider must be registered for flow logging to work properly. If you aren't sure whether the `Microsoft.Insights` provider is registered for your subscription, see [Azure portal](.//network-watcher-nsg-flow-logging-portal.md#register-insights-provider), [PowerShell](./network-watcher-nsg-flow-logging-powershell.md#register-insights-provider), or [Azure CLI](./network-watcher-nsg-flow-logging-cli.md#register-insights-provider) instructions on how to register it.
84
84
85
85
- question: |
86
86
I have configured the solution. Why am I not seeing anything on the dashboard?
@@ -102,14 +102,14 @@ sections:
102
102
answer: |
103
103
You might see this message because:
104
104
- Traffic analytics was recently enabled, and might not yet have aggregated enough data for it to derive meaningful insights.
105
-
- You are using the free version of the Log Analytics workspace, and it exceeded the quota limits. You might need to use a workspace with a larger capacity.
105
+
- You're using the free version of the Log Analytics workspace, and it exceeded the quota limits. You might need to use a workspace with a larger capacity.
106
106
107
107
Try the suggested solutions for the previous question. If problems persist, raise concerns in [Microsoft Q&A](/answers/topics/azure-network-watcher.html).
108
108
109
109
- question: |
110
110
What if I get this message: “Looks like we have resources data (Topology) and no flows information. For more information, click here to see resources data and refer to FAQ.”?
111
111
answer: |
112
-
You are seeing the resources information on the dashboard; however, no flow-related statistics are present. Data might not be present because of no communication flows between the resources. Wait for 60 minutes, and recheck status. If the problem persists, and you're sure that communication flows among resources exist, raise concerns in [Microsoft Q&A](/answers/topics/azure-network-watcher.html).
112
+
You're seeing the resources information on the dashboard; however, no flow-related statistics are present. Data might not be present because of no communication flows between the resources. Wait for 60 minutes, and recheck status. If the problem persists, and you're sure that communication flows among resources exist, raise concerns in [Microsoft Q&A](/answers/topics/azure-network-watcher.html).
113
113
114
114
- question: |
115
115
Can I configure traffic analytics using PowerShell?
@@ -200,12 +200,12 @@ sections:
200
200
How does traffic analytics decide that an IP is malicious?
201
201
answer: |
202
202
Traffic analytics relies on Microsoft internal threat intelligence systems to deem an IP as malicious. These systems leverage diverse telemetry sources like Microsoft products and services, the Microsoft Digital Crimes Unit (DCU), the Microsoft Security Response Center (MSRC), and external feeds and build a lot of intelligence on top of it.
203
-
Some of this data is Microsoft Internal. If a known IP is getting flagged as malicious, please raise a support ticket to know the details.
203
+
Some of this data is Microsoft Internal. If a known IP is getting flagged as malicious, raise a support ticket to know the details.
204
204
205
205
- question: |
206
206
How can I set alerts on traffic analytics data?
207
207
answer: |
208
-
Traffic analytics does not have built-in support for alerts. However, since traffic analytics data is stored in Log Analytics, you can write custom queries and set alerts on them.
208
+
Traffic analytics doesn't have built-in support for alerts. However, since traffic analytics data is stored in Log Analytics, you can write custom queries and set alerts on them.
209
209
Follow these steps:
210
210
- You can use Log Analytics link in traffic analytics.
211
211
- Use the [traffic analytics schema](traffic-analytics-schema.md) to write your queries.
@@ -363,7 +363,7 @@ sections:
363
363
- question: |
364
364
Are Classic network security groups supported?
365
365
answer: |
366
-
No, traffic analytics does not support classic network security groups. It is recommended to migrate IaaS resources from classic to Azure Resource Manager as classic resources will be [deprecated](../virtual-machines/classic-vm-deprecation.md). Refer this article to understand [how to migrate](../virtual-machines/migration-classic-resource-manager-overview.md).
366
+
No, traffic analytics doesn't support classic network security groups. It's recommended to migrate IaaS resources from classic to Azure Resource Manager as classic resources are [deprecated](../virtual-machines/classic-vm-deprecation.md). Refer this article to understand [how to migrate](../virtual-machines/migration-classic-resource-manager-overview.md).
367
367
368
368
- question: |
369
369
Why doesn't traffic analytics display data for my traffic analytics enabled network security groups?
0 commit comments