AZFWApplicationRuleAggregation

Contains aggregated Application rule log data for Policy Analytics.

Solutions

Column	Type	Description
Action	string	Action taken by the firewall following the Application rule hit.
ActionReason	string	When no rule is triggered for a packet, this field contains the reason for the action performed by the firewall.
ApplicationRuleCount	int	Aggregated count of Application rule.
DestinationPort	int	Request's destination port.
Fqdn	string	Request's target address in FQDN (Fully qualified Domain Name). For example: www.microsoft.com.
Policy	string	Name of the policy in which the triggered rule resides.
Protocol	string	Request's network protocol. For example: HTTP/HTTPS.
_ResourceId	string	A unique identifier for the resource that the record is associated with
Rule	string	Name of the triggered rule.
RuleCollection	string	Name of the rule collection in which the triggered rule resides.
RuleCollectionGroup	string	Name of the rule collection group in which the triggered rule resides.
SourceIp	string	Request's source IP address.
SourceSystem	string
_SubscriptionId	string	A unique identifier for the subscription that the record is associated with
TargetUrl	string	Request's target address URL. Available only for HTTP or TLS-inspected HTTPS requests. For example: https://www.microsoft.com/en-us/about.
TenantId	string
TimeGenerated	datetime	Timestamp (UTC) when the data plane log was created.
Type	string	The name of the table