Skip to content

Commit a076434

Browse files
authored
Merge pull request #269378 from halkazwini/nw-nsgflowlogs
Update links
2 parents f839a2f + a081f68 commit a076434

18 files changed

+37
-37
lines changed

articles/network-watcher/network-watcher-analyze-nsg-flow-logs-graylog.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,12 +15,12 @@ ms.custom: engagement-fy23, linux-related-content
1515
> [!CAUTION]
1616
> This article references CentOS, a Linux distribution that is nearing End Of Life (EOL) status. Please consider your use and planning accordingly.
1717
18-
[Network security group flow logs](network-watcher-nsg-flow-logging-overview.md) provide information that you can use to understand ingress and egress IP traffic for Azure network interfaces. Flow logs show outbound and inbound flows on a per network security group rule basis, the network interface the flow applies to, 5-tuple information (Source/Destination IP, Source/Destination Port, Protocol) about the flow, and if the traffic was allowed or denied.
18+
[Network security group flow logs](nsg-flow-logs-overview.md) provide information that you can use to understand ingress and egress IP traffic for Azure network interfaces. Flow logs show outbound and inbound flows on a per network security group rule basis, the network interface the flow applies to, 5-tuple information (Source/Destination IP, Source/Destination Port, Protocol) about the flow, and if the traffic was allowed or denied.
1919

2020
You can have many network security groups in your network with flow logging enabled. Several network security groups with flow logging enabled can make it cumbersome to parse and gain insights from your logs. This article provides a solution to centrally manage these network security group flow logs using Graylog, an open source log management and analysis tool, and Logstash, an open source server-side data processing pipeline.
2121

2222
> [!Warning]
23-
> The following steps work with flow logs version 1. For details, see [Introduction to flow logging for network security groups](network-watcher-nsg-flow-logging-overview.md). The following instructions will not work with version 2 of the log files, without modification.
23+
> The following steps work with flow logs version 1. For details, see [Introduction to flow logging for network security groups](nsg-flow-logs-overview.md). The following instructions will not work with version 2 of the log files, without modification.
2424
2525
## Scenario
2626

@@ -33,7 +33,7 @@ Network security group flow logs are enabled using Network Watcher. Flow logs fl
3333
### Enable network security group flow logging
3434

3535
For this scenario, you must have network security group flow logging enabled on at least one network security group in your account. For instructions on
36-
enabling network security group flow logs, refer to the following article [Introduction to flow logging for network security groups](network-watcher-nsg-flow-logging-overview.md).
36+
enabling network security group flow logs, refer to the following article [Introduction to flow logging for network security groups](nsg-flow-logs-overview.md).
3737

3838
### Setting up Graylog
3939

articles/network-watcher/network-watcher-create.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -229,6 +229,6 @@ az network watcher list --out table
229229

230230
To learn more about Network Watcher features, see:
231231

232-
- [NSG flow logs](network-watcher-nsg-flow-logging-overview.md)
232+
- [NSG flow logs](nsg-flow-logs-overview.md)
233233
- [Connection monitor](connection-monitor-overview.md)
234-
- [Connection troubleshoot](network-watcher-connectivity-overview.md)
234+
- [Connection troubleshoot](connection-troubleshoot-overview.md)

articles/network-watcher/network-watcher-nsg-grafana.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ ms.custom: engagement-fy23, linux-related-content
1515
> [!CAUTION]
1616
> This article references CentOS, a Linux distribution that is nearing End Of Life (EOL) status. Please consider your use and planning accordingly.
1717
18-
[Network Security Group (NSG) flow logs](network-watcher-nsg-flow-logging-overview.md) provide information that can be used to understand ingress and egress IP traffic on network interfaces. These flow logs show outbound and inbound flows on a per NSG rule basis, the NIC the flow applies to, 5-tuple information about the flow (Source/Destination IP, Source/Destination Port, Protocol), and if the traffic was allowed or denied.
18+
[Network Security Group (NSG) flow logs](nsg-flow-logs-overview.md) provide information that can be used to understand ingress and egress IP traffic on network interfaces. These flow logs show outbound and inbound flows on a per NSG rule basis, the NIC the flow applies to, 5-tuple information about the flow (Source/Destination IP, Source/Destination Port, Protocol), and if the traffic was allowed or denied.
1919

2020
You can have many NSGs in your network with flow logging enabled. This amount of logging data makes it cumbersome to parse and gain insights from your logs. This article provides a solution to centrally manage these NSG flow logs using Grafana, an open source graphing tool, ElasticSearch, a distributed search and analytics engine, and Logstash, which is an open source server-side data processing pipeline.
2121

@@ -29,7 +29,7 @@ NSG flow logs are enabled using Network Watcher and are stored in Azure blob sto
2929

3030
### Enable Network Security Group flow logging
3131

32-
For this scenario, you must have Network Security Group Flow Logging enabled on at least one Network Security Group in your account. For instructions on enabling Network Security Flow Logs, refer to the following article [Introduction to flow logging for Network Security Groups](network-watcher-nsg-flow-logging-overview.md).
32+
For this scenario, you must have Network Security Group Flow Logging enabled on at least one Network Security Group in your account. For instructions on enabling Network Security Flow Logs, refer to the following article [Introduction to flow logging for Network Security Groups](nsg-flow-logs-overview.md).
3333

3434
### Setup considerations
3535

articles/network-watcher/network-watcher-read-nsg-flow-logs.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ In the following scenario, you have an example flow log that is stored in a stor
2222

2323
## Setup
2424

25-
Before you begin, you must have Network Security Group Flow Logging enabled on one or many Network Security Groups in your account. For instructions on enabling Network Security flow logs, refer to the following article: [Introduction to flow logging for Network Security Groups](network-watcher-nsg-flow-logging-overview.md).
25+
Before you begin, you must have Network Security Group Flow Logging enabled on one or many Network Security Groups in your account. For instructions on enabling Network Security flow logs, refer to the following article: [Introduction to flow logging for Network Security Groups](nsg-flow-logs-overview.md).
2626

2727
## Retrieve the block list
2828

articles/network-watcher/network-watcher-using-open-source-tools.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,7 @@ You can use the Network Watcher packet capture feature to capture the necessary
8787

8888
## Next steps
8989

90-
- Learn about [NSG flow logs](network-watcher-nsg-flow-logging-overview.md).
90+
- Learn about [NSG flow logs](nsg-flow-logs-overview.md).
9191
- Learn [how to visualize your NSG flow logs by using Power BI](network-watcher-visualize-nsg-flow-logs-power-bi.md).
9292

9393
<!--Image references-->

articles/network-watcher/network-watcher-visualize-nsg-flow-logs-open-source-tools.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ In this article, we set up a solution that allows you to visualize Network Secur
3030

3131
### Enable Network Security Group flow logging
3232

33-
For this scenario, you must have Network Security Group Flow Logging enabled on at least one Network Security Group in your account. For instructions on enabling Network Security Flow Logs, see the following article [Introduction to flow logging for Network Security Groups](network-watcher-nsg-flow-logging-overview.md).
33+
For this scenario, you must have Network Security Group Flow Logging enabled on at least one Network Security Group in your account. For instructions on enabling Network Security Flow Logs, see the following article [Introduction to flow logging for Network Security Groups](nsg-flow-logs-overview.md).
3434

3535
### Set up the Elastic Stack
3636

articles/network-watcher/network-watcher-visualize-nsg-flow-logs-power-bi.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ Network Security Group flow logs allow you to view information about ingress and
1818
It can be difficult to gain insights into flow logging data by manually searching the log files. In this article, we provide a solution to visualize your most recent flow logs and learn about traffic on your network.
1919

2020
> [!Warning]
21-
> The following steps work with flow logs version 1. For details, see [Introduction to flow logging for network security groups](network-watcher-nsg-flow-logging-overview.md). The following instructions will not work with version 2 of the log files, without modification.
21+
> The following steps work with flow logs version 1. For details, see [Introduction to flow logging for network security groups](nsg-flow-logs-overview.md). The following instructions will not work with version 2 of the log files, without modification.
2222
2323
## Scenario
2424

@@ -36,15 +36,15 @@ The template provided is editable so you can modify it to add new data, visuals,
3636

3737
## Setup
3838

39-
Before you begin, you must have Network Security Group Flow Logging enabled on one or many Network Security Groups in your account. For instructions on enabling Network Security flow logs, refer to the following article: [Introduction to flow logging for Network Security Groups](network-watcher-nsg-flow-logging-overview.md).
39+
Before you begin, you must have Network Security Group Flow Logging enabled on one or many Network Security Groups in your account. For instructions on enabling Network Security flow logs, refer to the following article: [Introduction to flow logging for Network Security Groups](nsg-flow-logs-overview.md).
4040

4141
You must also have the Power BI Desktop client installed on your machine, and enough free space on your machine to download and load the log data that exists in your storage account.
4242

4343
![Visio diagram][1]
4444

4545
### Steps
4646

47-
1. Download and open the following Power BI template in the Power BI Desktop Application [Network Watcher PowerBI flow logs template](https://aka.ms/networkwatcherflowlogspowerbitemplate)
47+
1. Download and open the following Power BI template in the Power BI Desktop Application [Network Watcher Power BI flow logs template](https://aka.ms/networkwatcherflowlogspowerbitemplate)
4848
1. Enter the required Query parameters
4949
1. **StorageAccountName** – Specifies to the name of the storage account containing the NSG flow logs that you would like to load and visualize.
5050
1. **NumberOfLogFiles** – Specifies the number of log files that you would like to download and visualize in Power BI. For example, if 50 is specified, the 50 latest log files. If we have 2 NSGs enabled and configured to send NSG flow logs to this account, then the past 25 hours of logs can be viewed.
@@ -61,7 +61,7 @@ You must also have the Power BI Desktop client installed on your machine, and en
6161

6262
## Understanding the visuals
6363

64-
Provided in the template are a set of visuals that help make sense of the NSG Flow Log data. The following images show a sample of what the dashboard looks like when populated with data. Below we examine each visual in greater detail
64+
Provided in the template are a set of visuals that help make sense of the NSG Flow Log data. The following images show a sample of what the dashboard looks like when populated with data. Below we examine each visual in greater detail.
6565

6666
![powerbi][5]
6767

@@ -91,7 +91,7 @@ The following informational charts display information about the NSGs present in
9191

9292
![infochart2][12]
9393

94-
This template includes the following slicers to allow you to view only the data you are most interested in. You can filter on your resource groups, NSGs, and rules. You can also filter on 5-tuple information, decision, and the time the log was written.
94+
This template includes the following slicers to allow you to view only the data you're most interested in. You can filter on your resource groups, NSGs, and rules. You can also filter on 5-tuple information, decision, and the time the log was written.
9595

9696
![slicers][13]
9797

@@ -107,7 +107,7 @@ Feel free to customize this template for your needs. There are many numerous way
107107

108108
* If other data exists in another directory they the queries to pull and process the data must be modified.
109109

110-
* The provided template is not recommended for use with more than 1 GB of logs.
110+
* The provided template isn't recommended for use with more than 1 GB of logs.
111111

112112
* If you have a large amount of logs, we recommend that you investigate a solution using another data store like Data Lake or SQL server.
113113

articles/network-watcher/nsg-flow-logs-azure-resource-manager.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ ms.custom: devx-track-arm-template, fasttrack-edit
1414

1515
Network security group flow logging is a feature of Azure Network Watcher that allows you to log information about IP traffic flowing through a network security group. For more information about network security group flow logging, see [NSG flow logs overview](nsg-flow-logs-overview.md).
1616

17-
In this article, you learn how to manage NSG flow logs programmatically using an Azure Resource Manager template and Azure PowerShell. You can learn how to manage an NSG flow log using the [Azure portal](nsg-flow-logging.md), [PowerShell](nsg-flow-logs-powershell.md), [Azure CLI](nsg-flow-logs-cli.md), or [REST API](nsg-flow-logs-rest.md).
17+
In this article, you learn how to manage NSG flow logs programmatically using an Azure Resource Manager template and Azure PowerShell. You can learn how to manage an NSG flow log using the [Azure portal](nsg-flow-logs-portal.md), [PowerShell](nsg-flow-logs-powershell.md), [Azure CLI](nsg-flow-logs-cli.md), or [REST API](nsg-flow-logs-rest.md).
1818

1919
An [Azure Resource Manager template](../azure-resource-manager/templates/overview.md) is a JavaScript Object Notation (JSON) file that defines the infrastructure and configuration for your project using declarative syntax.
2020

articles/network-watcher/nsg-flow-logs-cli.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ ms.custom: devx-track-azurecli
1414

1515
Network security group flow logging is a feature of Azure Network Watcher that allows you to log information about IP traffic flowing through a network security group. For more information about network security group flow logging, see [NSG flow logs overview](nsg-flow-logs-overview.md).
1616

17-
In this article, you learn how to create, change, disable, or delete an NSG flow log using the Azure CLI. You can learn how to manage an NSG flow log using the [Azure portal](nsg-flow-logging.md), [PowerShell](nsg-flow-logs-powershell.md), [REST API](nsg-flow-logs-rest.md), or [ARM template](nsg-flow-logs-azure-resource-manager.md).
17+
In this article, you learn how to create, change, disable, or delete an NSG flow log using the Azure CLI. You can learn how to manage an NSG flow log using the [Azure portal](nsg-flow-logs-portal.md), [PowerShell](nsg-flow-logs-powershell.md), [REST API](nsg-flow-logs-rest.md), or [ARM template](nsg-flow-logs-azure-resource-manager.md).
1818

1919
## Prerequisites
2020

articles/network-watcher/nsg-flow-logs-overview.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -415,8 +415,8 @@ To learn how to create, change, disable, or delete NSG flow logs, see one of the
415415

416416
To learn how to read and export NSG flow logs, see one of the following guides:
417417

418-
- [Download and view flow logs from the portal](./nsg-flow-logging.md#download-a-flow-log)
419-
- [Read flow logs by using PowerShell functions](./network-watcher-read-nsg-flow-logs.md)
418+
- [Download and view flow logs from the portal](nsg-flow-logs-portal.md#download-a-flow-log)
419+
- [Read flow logs by using PowerShell functions](network-watcher-read-nsg-flow-logs.md)
420420
- [Export NSG flow logs to Splunk](https://www.splunk.com/en_us/blog/platform/splunking-azure-nsg-flow-logs.html)
421421

422422
NSG flow log files are stored in a storage account at the following path:

0 commit comments

Comments
 (0)