Skip to content

Commit c1588e5

Browse files
authored
Added resource-specific table info
1 parent 6aad99e commit c1588e5

File tree

1 file changed

+11
-3
lines changed

1 file changed

+11
-3
lines changed

articles/application-gateway/log-analytics.md

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ms.author: greglin
1212

1313
# Use Log Analytics to examine Application Gateway Logs
1414

15-
Once your Application Gateway is operational, you can enable logs to inspect the events that occur for your resource or with each request. For example, the Firewall logs give insight to what the Web Application Firewall (WAF) is evaluating, matching, and blocking. With Log Analytics, you can examine the data inside the firewall logs to give even more insights. For more information about log queries, see [Overview of log queries in Azure Monitor](/azure/azure-monitor/logs/log-query-overview).
15+
Once your Application Gateway is operational, you can enable logs to inspect the events that occur for your resource. For example, the Application Gateway Firewall logs give insight to what the Web Application Firewall (WAF) is evaluating, matching, and blocking. With Log Analytics, you can examine the data inside the firewall logs to give even more insights. For more information about log queries, see [Overview of log queries in Azure Monitor](/azure/azure-monitor/logs/log-query-overview).
1616

1717
In this article, we will look at the Web Application Firewall (WAF) logs. You can set up [other Application Gateway logs](application-gateway-diagnostics.md) in a similar way.
1818

@@ -28,18 +28,26 @@ To export your firewall logs into Log Analytics, see [Diagnostic logs for Applic
2828

2929
## Explore data with examples
3030

31-
To view the raw data in the firewall log, you can run the following query:
31+
When using **AzureDiagnostics** table, you can view the raw data in the firewall log by running the following query:
3232

3333
```
3434
AzureDiagnostics
3535
| where ResourceProvider == "MICROSOFT.NETWORK" and Category == "ApplicationGatewayFirewallLog"
36+
| limit 10
3637
```
3738

3839
This looks similar to the following query:
3940

4041
:::image type="content" source="media/log-analytics/log-query.png" alt-text="Screenshot of Log Analytics query." lightbox="media/log-analytics/log-query.png":::
4142

42-
You can drill down into the data, and plot graphs or create visualizations from here. See the following queries as a starting point:
43+
When using **Resource-specific** table, you can view the raw data in the firewall log by running the following query. To know about the resource-specific tables, visit [Monitoring data reference](monitor-application-gateway-reference.md#supported-resource-log-categories-for-microsoftnetworkapplicationgateways).
44+
45+
```
46+
AGWFirewallLogs
47+
| limit 10
48+
```
49+
50+
You can drill down into the data, and plot graphs or create visualizations from here. Here are some more examples of AzureDiagnostics queries that you can use.
4351

4452
### Matched/Blocked requests by IP
4553

0 commit comments

Comments
 (0)