This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 46%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EP%3C/text%3E%3C/svg%3E)
If the Azure firewall is currently set to "Azure Daignostics" and I want to change to "Resources specific" to get full diagnostics report based on new feature. Am I going to lose the diagnostics collected by "Azure Daignostics" till the date of swap or I will continue to have to old reports based on "Azure Daignostics" diagnostics?
An Azure network security service that is used to protect Azure Virtual Network resources.
Answer accepted by question author
You will continue to have the old data in the Diagnostics until the retention time expires.
The data won't be deleted during the swap operation from the old storage account, so will still continue to retain your old data.
"Resources specific" should give better Dianostic report? I think it is the correct approach to change from the older one? Or you would recommend enabling both
Hello @prasantc ,
Yes, Azure Firewall's structured logs provide a more detailed view of firewall events. They include information such as source and destination IP addresses, protocols, port numbers, and action taken by the firewall. They also include more metadata, such as the time of the event and the name of the Azure Firewall instance.
And as mentioned in the Azure Structured Firewall Logs doc,
With structured logs, you're able to choose to use Resource Specific Tables instead of the existing AzureDiagnostics table. In case both sets of logs are required, at least two diagnostic settings need to be created per firewall.
Refer: https://learn.microsoft.com/en-us/azure/firewall/firewall-structured-logs
So, if you want to get both Legacy AzureDiagnostics logs and the new Resource Specific logs, then you should create two different diagnostic settings for each type of log.
Resource specific: https://learn.microsoft.com/en-us/azure/firewall/firewall-structured-logs#enable-structured-logs
Regards,
Gita