NSG log analytics

Question

Hi Team,

Is there any query to find if any traffic has been flowing through the particular NSG rule.

Thanks.

Answer 1

@Vinoth Kaliaperumal

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

In case you would like to simulate traffic flow and test what rule is blocking/allowing a traffic (both Inbound and OutBound),

• You can consider either IP Flow Verify or NSG Diagnostics from Network watcher
• NSG Diagnostic:
  • 
    • If you click on "View Details" - you will arrive at the individual Rule that allowed/blocked the request.
• IP Flow Verify :
  • 
    • This will directly give you the security rule allowing/blocking the request

However, if you would like to log all the traffic flow

You should consider using NSG Flow Logs

This feature only logs the traffic flow.

To visualize the logs, see Visualize flow logs.

• The inbuilt way to do this is to use Traffic analytics

Kindly let us know if this helps or you need further assistance on this issue.

Thanks,

Kapil

---

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.