Queries for the AZFWFlowTrace table
For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.
Azure Firewall flow trace logs
Identify flow traces across Azure Firewall instances. Log contains flow information, flags and the time period when the flows were recorded.
AZFWFlowTrace
| where Flag == "INVALID"
| order by TimeGenerated desc
| take 100