You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/application-gateway/log-analytics.md
+11-3Lines changed: 11 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -12,7 +12,7 @@ ms.author: greglin
12
12
13
13
# Use Log Analytics to examine Application Gateway Logs
14
14
15
-
Once your Application Gateway is operational, you can enable logs to inspect the events that occur for your resource or with each request. For example, the Firewall logs give insight to what the Web Application Firewall (WAF) is evaluating, matching, and blocking. With Log Analytics, you can examine the data inside the firewall logs to give even more insights. For more information about log queries, see [Overview of log queries in Azure Monitor](/azure/azure-monitor/logs/log-query-overview).
15
+
Once your Application Gateway is operational, you can enable logs to inspect the events that occur for your resource. For example, the Application Gateway Firewall logs give insight to what the Web Application Firewall (WAF) is evaluating, matching, and blocking. With Log Analytics, you can examine the data inside the firewall logs to give even more insights. For more information about log queries, see [Overview of log queries in Azure Monitor](/azure/azure-monitor/logs/log-query-overview).
16
16
17
17
In this article, we will look at the Web Application Firewall (WAF) logs. You can set up [other Application Gateway logs](application-gateway-diagnostics.md) in a similar way.
18
18
@@ -28,18 +28,26 @@ To export your firewall logs into Log Analytics, see [Diagnostic logs for Applic
28
28
29
29
## Explore data with examples
30
30
31
-
To view the raw data in the firewall log, you can run the following query:
31
+
When using **AzureDiagnostics** table, you can view the raw data in the firewall log by running the following query:
32
32
33
33
```
34
34
AzureDiagnostics
35
35
| where ResourceProvider == "MICROSOFT.NETWORK" and Category == "ApplicationGatewayFirewallLog"
36
+
| limit 10
36
37
```
37
38
38
39
This looks similar to the following query:
39
40
40
41
:::image type="content" source="media/log-analytics/log-query.png" alt-text="Screenshot of Log Analytics query." lightbox="media/log-analytics/log-query.png":::
41
42
42
-
You can drill down into the data, and plot graphs or create visualizations from here. See the following queries as a starting point:
43
+
When using **Resource-specific** table, you can view the raw data in the firewall log by running the following query. To know about the resource-specific tables, visit [Monitoring data reference](monitor-application-gateway-reference.md#supported-resource-log-categories-for-microsoftnetworkapplicationgateways).
44
+
45
+
```
46
+
AGWFirewallLogs
47
+
| limit 10
48
+
```
49
+
50
+
You can drill down into the data, and plot graphs or create visualizations from here. Here are some more examples of AzureDiagnostics queries that you can use.
0 commit comments