You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/network-watcher/traffic-analytics-schema.md
+5-6Lines changed: 5 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,7 +8,6 @@ ms.service: azure-network-watcher
8
8
ms.topic: concept-article
9
9
ms.date: 02/07/2025
10
10
11
-
#CustomerIntent: As a administrator, I want learn about traffic analytics schema so I can easily use the queries and understand their output.
12
11
# Customer intent: "As a network administrator, I want to understand the traffic analytics schema and data aggregation methods so that I can effectively analyze flow logs and enhance network performance and security."
13
12
---
14
13
@@ -119,9 +118,9 @@ The following table lists the fields in the schema and what they signify for net
119
118
> |**L7Protocol_s**| Protocol Name | Derived from destination port. |
120
119
> |**FlowDirection_s**| - I = Inbound <br> - O = Outbound | Direction of the flow: in or out of network security group per flow log. |
121
120
> |**FlowStatus_s**| - A = Allowed <br> - D = Denied | Status of flow whether allowed or denied by the network security group per flow log. |
122
-
> |**NSGList_s**|\<SUBSCRIPTIONID\>/\<RESOURCEGROUP_NAME\>/\<NSG_NAME\>| Network security group associated with the flow. |
123
-
> |**NSGRules_s**|\<Index value 0>\|\<NSG_RULENAME>\|\<Flow Direction>\|\<Flow Status>\|\<FlowCount ProcessedByRule> | Network security group rule that allowed or denied this flow. |
124
-
> |**NSGRule_s**|NSG_RULENAME| Network security group rule that allowed or denied this flow. |
121
+
> |**NSGList_s**|\<SubscriptionID\>/\<resourcegroup_Name\>/\<NSG_Name\>| Network security group associated with the flow. |
122
+
> |**NSGRules_s**|\<Index value 0>\|\<NSG_Rule_Name>\|\<Flow Direction>\|\<Flow Status>\|\<FlowCount ProcessedByRule> | Network security group rule that allowed or denied this flow. |
123
+
> |**NSGRule_s**|NSG_Rule_Name| Network security group rule that allowed or denied this flow. |
125
124
| **NSGRuleType_s** | - User Defined <br> - Default | The type of network security group rule used by the flow. |
126
125
> |**MACAddress_s**| MAC Address | MAC address of the NIC at which the flow was captured. |
127
126
> |**Subscription_g**| Subscription of the Azure virtual network / network interface / virtual machine is populated in this field | Applicable only for FlowType = S2S, P2S, AzurePublic, ExternalPublic, MaliciousFlow, and UnknownPrivate flow types (flow types where only one side is Azure). |
@@ -201,8 +200,8 @@ The following table lists the fields in the schema and what they signify for vir
201
200
> |**L7Protocol**| Protocol Name | Derived from destination port. |
202
201
> |**FlowDirection**| - **I** = Inbound <br> - **O** = Outbound | Direction of the flow: in or out of the target resource per flow log. |
203
202
> |**FlowStatus**| - **A** = Allowed <br> - **D** = Denied | Status of flow: allowed or denied by target resource per flow log. |
204
-
> |**AclList**|\<SUBSCRIPTIONID\>/\<RESOURCEGROUP_NAME\>/\<NSG_NAME\>| Network security group associated with the flow. |
205
-
> |**AclRule**|NSG_RULENAME| Network security group rule that allowed or denied the flow. |
203
+
> |**AclList**|\<SubscriptionID\>/\<resourcegroup_Name\>/\<NSG_Name\>| Network security group associated with the flow. |
204
+
> |**AclRule**|NSG_Rule_Name| Network security group rule that allowed or denied the flow. |
206
205
> |**MACAddress**| MAC Address | MAC address of the NIC at which the flow was captured. |
207
206
> |**SrcSubscription**| Subscription ID | Subscription ID of virtual network / network interface / virtual machine that the source IP in the flow belongs to. |
208
207
> |**DestSubscription**| Subscription ID | Subscription ID of virtual network / network interface / virtual machine that the destination IP in the flow belongs to. |
0 commit comments