Topology (Preview)

Topology provides a visualization of the entire network for understanding network configuration. It provides an interactive interface to view resources and their relationships in Azure spanning across multiple subscriptions, resource groups and locations. You can also drill down to a resource view for resources to view their component level visualization.


  • If you don't have an Azure subscription, create a free account before you begin.
  • An account with the necessary RBAC permissions to utilize the Network watcher capabilities.

Supported resource types

The following are the resource types supported by Topology:

  • Application gateways
  • ExpressRoute Circuits
  • Load balancers
  • Network Interfaces
  • Network Security Groups
  • PrivateLink Endpoints
  • PrivateLink Services
  • Public IP Addresses
  • Virtual Machines
  • Virtual Network Gateways
  • Virtual Networks

View Topology

To view a topology, follow these steps:

  1. Log into the Azure portal with an account that has the necessary permissions.

  2. Select More services.

  3. In the All services screen, enter Monitor in the Filter services search box and select it from the search result.

  4. Under Insights, select Networks.

  5. In the Networks screen that appears, select Topology.

  6. Select Scope to define the scope of the Topology.

  7. In the Select scope pane, select the list of Subscriptions, Resource groups, and Locations of the resources for which you want to view the topology. Select Save.

    Screenshot of selecting the scope of the topology.

    The duration to render the topology may vary depending on the number of subscriptions selected.

  8. Select the Resource type that you want to include in the topology and select Apply.

The topology containing the resources according to the scope and resource type specified, appears.

Screenshot of the generated resource topology.

Each edge of the topology represents an association between each of the resources. In the topology, similar types of resources are grouped together.

Add regions

You can add regions that aren't part of the existing topology. The number of regions that aren't part of the existing topology are displayed. To add a region, follow these steps:

  1. Hover on Regions under Azure Regions.

  2. From the list of Hidden Resources, select the regions to be added and select Add to View.

    Screenshot of the add resources and regions pane.

You can view the resources in the added region as part of the topology.

Drilldown resources

To drill down to the basic unit of each network, select the plus sign on each resource. When you hover on the resource, you can see the details of that resource. Selecting a resource displays a pane on the right with a summary of the resource.

Screenshot of the details of each resource.

Drilling down into Azure resources such as Application Gateways and Firewalls displays the resource view diagram of that resource.

Screenshot of drilling down a resource.

Integration with diagnostic tools

When you drill down to a VM within the topology, the summary pane contains the Insights + Diagnostics section from where you can find the next hop.

Screenshot of the summary and insights of each resource.

Follow these steps to find the next hop.

  1. Click Next hop and enter the destination IP address.

  2. Select Check Next Hop. The Next hop checks if the destination IP address is reachable from the source VM.

    Screenshot of the next hop option in the summary and insights tab.

Next steps

Learn more about connectivity related metrics.