Skip to content

Commit c33dc9c

Browse files
Merge pull request #266545 from halkazwini/nw-fl2
Network Watcher: Updates: VNet flow logs
2 parents 14e5fef + 7d1dc2d commit c33dc9c

File tree

1 file changed

+19
-26
lines changed

1 file changed

+19
-26
lines changed

articles/network-watcher/vnet-flow-logs-overview.md

Lines changed: 19 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,17 @@
11
---
2-
title: VNet flow logs (preview)
2+
title: VNet flow logs (Preview)
33
titleSuffix: Azure Network Watcher
44
description: Learn about Azure Network Watcher VNet flow logs and how to use them to record your virtual network's traffic.
55
author: halkazwini
66
ms.author: halkazwini
77
ms.service: network-watcher
88
ms.topic: concept-article
9-
ms.date: 01/16/2024
9+
ms.date: 02/16/2024
1010

1111
#CustomerIntent: As an Azure administrator, I want to learn about VNet flow logs so that I can log my network traffic to analyze and optimize network performance.
1212
---
1313

14-
# VNet flow logs (preview)
14+
# VNet flow logs (Preview)
1515

1616
Virtual network (VNet) flow logs are a feature of Azure Network Watcher. You can use them to log information about IP traffic flowing through a virtual network.
1717

@@ -204,46 +204,39 @@ Here's an example bandwidth calculation for flow tuples from a TCP conversation
204204

205205
For continuation (`C`) and end (`E`) flow states, byte and packet counts are aggregate counts from the time of the previous flow's tuple record. In the example conversation, the total number of packets transferred is 1,021 + 52 + 8,005 + 47 = 9,125. The total number of bytes transferred is 588,096 + 29,952 + 4,610,880 + 27,072 = 5,256,000.
206206

207-
## Considerations for VNet flow logs
208-
209-
### Storage account
207+
## Storage account considerations for VNet flow logs
210208

211209
- **Location**: The storage account must be in the same region as the virtual network.
212-
- **Subscription**: The storage account must be in either:
213-
214-
- The same subscription as the virtual network.
215-
- A subscription that's associated with the same Microsoft Entra tenant as the virtual network's subscription.
210+
- **Subscription**: The storage account must be in the same subscription of the virtual network or in a subscription associated with the same Microsoft Entra tenant of the virtual network's subscription.
216211
- **Performance tier**: The storage account must be standard. Premium storage accounts aren't supported.
217212
- **Self-managed key rotation**: If you change or rotate the access keys to your storage account, VNet flow logs stop working. To fix this problem, you must disable and then re-enable VNet flow logs.
218213

219-
### Cost
220-
221-
VNet flow logs are billed on the volume of logs produced. High traffic volume can result in large-flow log volume and the associated costs.
222-
223-
Pricing of VNet flow logs doesn't include the underlying costs of storage. Using the retention policy feature with VNet flow logs means incurring separate storage costs for extended periods of time.
214+
## Pricing
224215

225-
If you want to retain data forever and don't want to apply any retention policy, set retention days to zero. For more information, see [Network Watcher pricing](https://azure.microsoft.com/pricing/details/network-watcher/) and [Azure Storage pricing](https://azure.microsoft.com/pricing/details/storage/).
216+
Currently, VNet flow logs aren't billed. However, the following costs apply:
226217

227-
## Pricing
218+
If traffic analytics is enabled for VNet flow logs, traffic analytics pricing applies at per gigabyte processing rates. For more information, see [Network Watcher pricing](https://azure.microsoft.com/pricing/details/network-watcher/).
228219

229-
Currently, VNet flow logs aren't billed. In the future, VNet flow logs will be billed per gigabyte of *network logs collected* and will come with a free tier of 5 GB/month per subscription. If enable traffic analytics for VNet flow logs, existing pricing for traffic analytics applies. For more information, see [Network Watcher pricing](https://azure.microsoft.com/pricing/details/network-watcher/).
220+
Flow logs are stored in a storage account, and their retention policy can be set from one day to 365 days. If a retention policy isn't set, the logs are maintained forever. Pricing of VNet flow logs doesn't include the costs of storage. For more information, see [Azure Blob Storage pricing](https://azure.microsoft.com/pricing/details/storage/blobs/).
230221

231222
## Availability
232223

233224
VNet flow logs are available in the following regions during the preview:
234225

235-
- East US 2 EUAP
236-
- Central US EUAP
226+
- Central US EUAP<sup>1</sup>
227+
- East US<sup>1</sup>
228+
- East US 2<sup>1</sup>
229+
- East US 2 EUAP<sup>1</sup>
230+
- Swiss North
231+
- UK South
237232
- West Central US
238-
- East US
239-
- East US 2
240-
- West US
241-
- West US 2
233+
- West US<sup>1</sup>
234+
- West US 2<sup>1</sup>
242235

243-
To get access to the preview, go to the [VNet flow logs preview sign-up page](https://aka.ms/VNetflowlogspreviewsignup).
236+
<sup>1</sup> Requires signing up for access to the preview. Fill out the [VNet flow logs preview sign-up form](https://aka.ms/VNetflowlogspreviewsignup) to access to the preview.
244237

245238
## Related content
246239

247-
- To learn how to manage VNet flow logs, see [Create, change, enable, disable, or delete VNet flow logs using Azure PowerShell](vnet-flow-logs-powershell.md) or [Create, change, enable, disable, or delete VNet flow logs using the Azure CLI](vnet-flow-logs-cli.md).
240+
- To learn how to create, change, enable, disable, or delete VNet flow logs, see [Manage VNet flow logs using Azure PowerShell](vnet-flow-logs-powershell.md) or [Manage VNet flow logs using the Azure CLI](vnet-flow-logs-cli.md).
248241
- To learn about traffic analytics, see [Traffic analytics overview](traffic-analytics.md) and [Schema and data aggregation in Azure Network Watcher traffic analytics](traffic-analytics-schema.md).
249242
- To learn how to use Azure built-in policies to audit or enable traffic analytics, see [Manage traffic analytics using Azure Policy](traffic-analytics-policy-portal.md).

0 commit comments

Comments
 (0)