AZMSVnetConnectionEvents 表的查询

有关在Azure 门户中使用这些查询的信息，请参阅 Log Analytics 教程。 有关 REST API，请参阅 查询。

按命名空间发布拒绝连接

按命名空间在网络数据上发布拒绝连接。

AZMSVnetConnectionEvents
| extend NamespaceName = tostring(split(_ResourceId, "/")[8])
| where Provider =~ "EventHub"
| where Action == "Deny Connection"
| project Action, _SubscriptionId, NamespaceName, AddressIp, Reason, Count
| summarize by Action, NamespaceName

发布命名空间 vnet 数据

按操作状态发布命名空间的 vnet 数据。

AZMSVnetConnectionEvents
| extend NamespaceName = tostring(split(_ResourceId, "/")[8])
| where Provider =~ "EventHub"
| project Action, _SubscriptionId, NamespaceName, AddressIp, Reason, Count, _ResourceId
| summarize by NamespaceName, Action

按命名空间发布拒绝连接

按命名空间发布拒绝网络连接信息。

AZMSVNetConnectionEvents
| extend NamespaceName = tostring(split(_ResourceId, "/")[8])
| where Provider =~ "Relay"
| where Action == "Deny Connection"
| project Action, _SubscriptionId, NamespaceName, AddressIp, Reason, Count
| summarize by Action, NamespaceName

按命名空间发布虚拟网络事件

发布具有命名空间结果的虚拟网络事件。

AZMSVNetConnectionEvents
| extend NamespaceName = tostring(split(_ResourceId, "/")[8])
| where Provider =~ "Relay"
| project Action, _SubscriptionId, NamespaceName, AddressIp, Reason, Count, _ResourceId
| summarize by NamespaceName, Action

按命名空间发布拒绝连接

按命名空间发布拒绝网络连接信息。

AZMSVNetConnectionEvents
| extend NamespaceName = tostring(split(_ResourceId, "/")[8])
| where Provider =~ "ServiceBus"
| where Action == "Deny Connection"
| project Action, _SubscriptionId, NamespaceName, AddressIp, Reason, Count
| summarize by Action, NamespaceName

按命名空间发布虚拟网络事件

发布具有命名空间结果的虚拟网络事件。

AZMSVNetConnectionEvents
| extend NamespaceName = tostring(split(_ResourceId, "/")[8])
| where Provider =~ "ServiceBus"
| project Action, _SubscriptionId, NamespaceName, AddressIp, Reason, Count, _ResourceId
| summarize by NamespaceName, Action