Skip to content

Commit e604d9d

Browse files
Incorporate feedback.
1 parent 618560b commit e604d9d

File tree

2 files changed

+34
-46
lines changed

2 files changed

+34
-46
lines changed

articles/virtual-wan/monitor-virtual-wan-reference.md

Lines changed: 24 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Monitoring data reference for Azure Virtual WAN
33
description: This article contains important reference material you need when you monitor Azure Virtual WAN by using Azure Monitor.
4-
ms.date: 07/25/2024
4+
ms.date: 08/28/2024
55
ms.custom: horz-monitor
66
ms.topic: reference
77
author: cherylmc
@@ -28,7 +28,7 @@ This table contains more information about some of the metrics in the preceding
2828

2929
| Metric | Description |
3030
|:-------|:------------|
31-
| **Data Processed by the Virtual Hub Router** | Data on how much traffic traverses the virtual hub router in a given time period. Only the following flows use the virtual hub router: virtual network to virtual network, same hub and interhub, and VPN/ExpressRoute branch to virtual network, for interhub. If a virtual hub is secured with routing intent, then these flows traverse the firewall instead of the hub router. |
31+
| **Data Processed by the Virtual Hub Router** | Data on how much traffic traverses the virtual hub router in a given time period. Only the following flows use the virtual hub router: virtual network to virtual network, same hub and interhub, and VPN/ExpressRoute branch to virtual network, for interhub. If a virtual hub is secured with routing intent, then these flows traverse the firewall instead of the hub router. *Same hub* and *interhub* refer to virtual network to virtual network traffic. These were previously described as *VNet to VNet* for *same hub and interhub* and *VPN/ExpressRoute branch to VNet* for *interhub*.|
3232
| **Routing Infrastructure Units** | The virtual hub's routing infrastructure units (RIU). The virtual hub's RIU determines how much bandwidth the virtual hub router can process for flows traversing the virtual hub router. The hub's RIU also determines how many VMs in spoke VNets the virtual hub router can support. For more information on routing infrastructure units, see [Virtual Hub Capacity](hub-settings.md#capacity).
3333
| **Spoke VM Utilization** | The approximate number of deployed spoke VMs as a percentage of the total number of spoke VMs that the hub's routing infrastructure units can support. For example, if the hub's RIU is set to 2, which supports 2,000 spoke VMs, and 1,000 VMs are deployed across spoke virtual networks, this metric's value is approximately 50%. |
3434

@@ -187,6 +187,28 @@ This table contains more information about the preceding table.
187187
| **Route Diagnostic Logs** | Logs related to events for static routes, BGP, route updates, and other diagnostics. |
188188
| **IKE Diagnostic Logs** | IKE-specific diagnostics for IPsec connections. |
189189

190+
### Log Analytics sample query
191+
192+
If you selected to send diagnostic data to a Log Analytics Workspace, then you can use SQL-like queries, such as the following example, to examine the data. For more information, see [Log Analytics Query Language](/services-hub/health/log-analytics-query-language).
193+
194+
The following example contains a query to obtain site-to-site route diagnostics.
195+
196+
`AzureDiagnostics | where Category == "RouteDiagnosticLog"`
197+
198+
Replace the following values, after the `==`, as needed based on the tables in this article.
199+
200+
- GatewayDiagnosticLog
201+
- IKEDiagnosticLog
202+
- P2SDiagnosticLog
203+
- TunnelDiagnosticLog
204+
- RouteDiagnosticLog
205+
206+
In order to run the query, you have to open the Log Analytics resource you configured to receive the diagnostic logs, and then select **Logs** under the **General** tab on the left side of the pane:
207+
208+
:::image type="content" source="./media/monitor-virtual-wan-reference/log-analytics-query-samples.png" alt-text="Screenshot of Log Analytics Query samples." lightbox="./media/monitor-virtual-wan-reference/log-analytics-query-samples.png":::
209+
210+
For Azure Firewall, a [workbook](../firewall/firewall-workbook.md) is provided to make log analysis easier. Using its graphical interface, you can investigate the diagnostic data without manually writing any Log Analytics query.
211+
190212
[!INCLUDE [horz-monitor-ref-logs-tables](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-ref-logs-tables.md)]
191213

192214
### Virtual WAN Microsoft.Network/vpnGateways

articles/virtual-wan/monitor-virtual-wan.md

Lines changed: 10 additions & 44 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Monitor Azure Virtual WAN
33
description: Start here to learn how to monitor availability and performance for Azure Virtual WAN by using Azure Monitor.
4-
ms.date: 07/25/2024
4+
ms.date: 08/28/2024
55
ms.custom: horz-monitor
66
ms.topic: conceptual
77
author: cherylmc
@@ -15,7 +15,7 @@ ms.service: azure-virtual-wan
1515

1616
[!INCLUDE [horz-monitor-insights](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-insights.md)]
1717

18-
Virtual WAN uses Network Insights to provide users and operators with the ability to view the state and status of a virtual WAN, presented through an autodiscovered topological map. Resource state and status overlays on the map give you a snapshot view of the overall health of the virtual WAN. You can navigate resources on the map by using one-click access to the resource configuration pages of the Virtual WAN portal. For more information, see [Azure Monitor Network Insights for Virtual WAN](azure-monitor-insights.md).
18+
Virtual WAN uses Network Insights to provide users and operators with the ability to view the state and status of a Virtual WAN, presented through an autodiscovered topological map. Resource state and status overlays on the map give you a snapshot view of the overall health of the Virtual WAN. You can navigate resources on the map by using one-click access to the resource configuration pages of the Virtual WAN portal. For more information, see [Azure Monitor Network Insights for Virtual WAN](azure-monitor-insights.md).
1919

2020
[!INCLUDE [horz-monitor-resource-types](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-resource-types.md)]
2121

@@ -27,27 +27,21 @@ For more information about the resource types for Virtual WAN, see [Azure Virtua
2727

2828
For a list of available metrics for Virtual WAN, see [Azure Virtual WAN monitoring data reference](monitor-virtual-wan-reference.md#metrics).
2929

30-
<!-- ## OPTIONAL [TODO-replace-with-service-name] metrics
31-
If your service uses any non-Azure Monitor based metrics, add the following include and more information.
32-
[!INCLUDE [horz-monitor-custom-metrics](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-non-monitor-metrics.md)] -->
33-
3430
<a name="metrics-steps"></a>
3531

36-
You can view metrics for Virtual WAN by using the Azure portal.
37-
38-
The following steps help you locate and view metrics:
32+
You can view metrics for Virtual WAN by using the Azure portal. The following steps help you locate and view metrics:
3933

40-
Select **Monitor Gateway** and then **Metrics**. You can also select **Metrics** at the bottom to view a dashboard of the most important metrics for site-to-site and point-to-site VPN.
34+
1. Select **Monitor Gateway** and then **Metrics**. You can also select **Metrics** at the bottom to view a dashboard of the most important metrics for site-to-site and point-to-site VPN.
4135

42-
:::image type="content" source="./media/monitor-virtual-wan-reference/site-to-site-vpn-metrics-dashboard.png" alt-text="Screenshot shows the sie-to-site VPN metrics dashboard." lightbox="./media/monitor-virtual-wan-reference/site-to-site-vpn-metrics-dashboard.png":::
36+
:::image type="content" source="./media/monitor-virtual-wan-reference/site-to-site-vpn-metrics-dashboard.png" alt-text="Screenshot shows the sie-to-site VPN metrics dashboard." lightbox="./media/monitor-virtual-wan-reference/site-to-site-vpn-metrics-dashboard.png":::
4337

44-
On the **Metrics** page, you can view the metrics.
38+
1. On the **Metrics** page, you can view the metrics.
4539

46-
:::image type="content" source="./media/monitor-virtual-wan-reference/metrics-page.png" alt-text="Screenshot that shows the 'Metrics' page with the categories highlighted." lightbox="./media/monitor-virtual-wan-reference/metrics-page.png":::
40+
:::image type="content" source="./media/monitor-virtual-wan-reference/metrics-page.png" alt-text="Screenshot that shows the 'Metrics' page with the categories highlighted." lightbox="./media/monitor-virtual-wan-reference/metrics-page.png":::
4741

48-
To see metrics for the virtual hub router, you can select **Metrics** from the virtual hub **Overview** page.
42+
1. To see metrics for the virtual hub router, you can select **Metrics** from the virtual hub **Overview** page.
4943

50-
:::image type="content" source="./media/monitor-virtual-wan-reference/hub-metrics.png" alt-text="Screenshot that shows the virtual hub page with the metrics button." lightbox="./media/monitor-virtual-wan-reference/hub-metrics.png":::
44+
:::image type="content" source="./media/monitor-virtual-wan-reference/hub-metrics.png" alt-text="Screenshot that shows the virtual hub page with the metrics button." lightbox="./media/monitor-virtual-wan-reference/hub-metrics.png":::
5145

5246
For more information, see [Analyze metrics for an Azure resource](../azure-monitor/essentials/tutorial-metrics.md).
5347

@@ -86,30 +80,6 @@ When you review any metrics through Log Analytics, the output contains the follo
8680
|Average|real|Equal to (Minimum + Maximum)/2|
8781
|Total|real|Sum of the two metric values from both MSEEs (the main value to focus on for the metric queried)|
8882

89-
90-
91-
### Log Analytics sample query
92-
93-
If you selected to send diagnostic data to a Log Analytics Workspace, then you can use SQL-like queries, such as the following example, to examine the data. For more information, see [Log Analytics Query Language](/services-hub/health/log-analytics-query-language).
94-
95-
The following example contains a query to obtain site-to-site route diagnostics.
96-
97-
`AzureDiagnostics | where Category == "RouteDiagnosticLog"`
98-
99-
Replace the following values, after the `==`, as needed based on the tables reported in the previous section of this article.
100-
101-
- GatewayDiagnosticLog
102-
- IKEDiagnosticLog
103-
- P2SDiagnosticLog
104-
- TunnelDiagnosticLog
105-
- RouteDiagnosticLog
106-
107-
In order to run the query, you have to open the Log Analytics resource you configured to receive the diagnostic logs, and then select **Logs** under the **General** tab on the left side of the pane:
108-
109-
:::image type="content" source="./media/monitor-virtual-wan-reference/log-analytics-query-samples.png" alt-text="Screenshot of Log Analytics Query samples." lightbox="./media/monitor-virtual-wan-reference/log-analytics-query-samples.png":::
110-
111-
For Azure Firewall, a [workbook](../firewall/firewall-workbook.md) is provided to make log analysis easier. Using its graphical interface, you can investigate the diagnostic data without manually writing any Log Analytics query.
112-
11383
### <a name="create-diagnostic"></a>Create diagnostic setting to view logs
11484

11585
The following steps help you create, edit, and view diagnostic settings:
@@ -154,8 +124,6 @@ You can monitor the Secured Hub using Azure Firewall logs and metrics. You can a
154124

155125
[!INCLUDE [horz-monitor-kusto-queries](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-kusto-queries.md)]
156126

157-
<!-- REQUIRED. Add sample Kusto queries for your service here. -->
158-
159127
[!INCLUDE [horz-monitor-alerts](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-alerts.md)]
160128

161129
[!INCLUDE [horz-monitor-insights-alerts](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-insights-alerts.md)]
@@ -164,8 +132,6 @@ You can monitor the Secured Hub using Azure Firewall logs and metrics. You can a
164132

165133
You can set alerts for any metric, log entry, or activity log entry listed in the [Azure Virtual WAN monitoring data reference](monitor-virtual-wan-reference.md).
166134

167-
[!INCLUDE [horz-monitor-advisor-recommendations](~/reusable-content/ce-skilling/azure/includes/azure-monitor/horizontals/horz-monitor-advisor-recommendations.md)]
168-
169135
## Monitoring Azure Virtual WAN - Best practices
170136

171137
This article provides configuration best practices for monitoring Virtual WAN and the different components that can be deployed with it. The recommendations presented in this article are mostly based on existing Azure Monitor metrics and logs generated by Azure Virtual WAN. For a list of metrics and logs collected for Virtual WAN, see the [Monitoring Virtual WAN data reference](monitor-virtual-wan-reference.md).
@@ -174,7 +140,7 @@ Most of the recommendations in this article suggest creating Azure Monitor alert
174140

175141
### Virtual WAN gateways
176142

177-
This section describes best practices for WAN gateways.
143+
This section describes best practices for Virtual WAN gateways.
178144

179145
#### Site-to-site VPN gateway
180146

0 commit comments

Comments
 (0)