You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/network-watcher/traffic-analytics-schema.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -109,8 +109,8 @@ The following table lists the fields in the schema and what they signify for vir
109
109
> |**BytesDestToSrc**| - | Represents bytes sent from the destination to the source of the flow. |
110
110
> |**BytesSrcToDest**| - | Represents bytes sent from the source to the destination of the flow. |
111
111
> |**CompletedFlows**| - | Total number of flows completed (populated with non-zero value when a flow gets a completed event). |
112
-
> |**SrcPublicIPs**|\<SOURCE_PUBLIC_IP\>\|\<FLOW_STARTED_COUNT\>\|\<FLOW_ENDED_COUNT\>\|\<OUTBOUND_PACKETS\>\|\<INBOUND_PACKETS\>\|\<OUTBOUND_BYTES\>\|\<INBOUND_BYTES\>| Entries separated by bars. |
113
-
> |**DestPublicIPs**| <DESTINATION_PUBLIC_IP>\|\<FLOW_STARTED_COUNT>\|\<FLOW_ENDED_COUNT>\|\<OUTBOUND_PACKETS>\|\<INBOUND_PACKETS>\|\<OUTBOUND_BYTES>\|\<INBOUND_BYTES> | Entries separated by bars. |
112
+
> |**SrcPublicIps**|\<SOURCE_PUBLIC_IP\>\|\<FLOW_STARTED_COUNT\>\|\<FLOW_ENDED_COUNT\>\|\<OUTBOUND_PACKETS\>\|\<INBOUND_PACKETS\>\|\<OUTBOUND_BYTES\>\|\<INBOUND_BYTES\>| Entries separated by bars. |
113
+
> |**DestPublicIps**| <DESTINATION_PUBLIC_IP>\|\<FLOW_STARTED_COUNT>\|\<FLOW_ENDED_COUNT>\|\<OUTBOUND_PACKETS>\|\<INBOUND_PACKETS>\|\<OUTBOUND_BYTES>\|\<INBOUND_BYTES> | Entries separated by bars. |
114
114
> |**FlowEncryption**| - Encrypted <br>- Unencrypted <br>- Unsupported hardware <br>- Software not ready <br>- Drop due to no encryption <br>- Discovery not supported <br>- Destination on same host <br>- Fall back to no encryption. | Encryption level of flows. |
115
115
> |**PrivateEndpointResourceId**| <ResourceGroup/privateEndpointResource> | Resource ID of the private endpoint resource. Populated when traffic is flowing to or from a private endpoint resource. |
116
116
> |**PrivateLinkResourceId**| <ResourceGroup/ResourceType/privateLinkResource> | Resource ID of the private link service. Populated when traffic is flowing to or from a private endpoint resource. |
@@ -148,7 +148,7 @@ The following table lists the fields in the schema and what they signify for net
148
148
> |**NSGRules_s**|\<Index value 0>\|\<NSG_Rule_Name>\|\<Flow Direction>\|\<Flow Status>\|\<FlowCount ProcessedByRule> | Network security group rule that allowed or denied this flow. |
149
149
> |**NSGRule_s**| NSG_Rule_Name | Network security group rule that allowed or denied this flow. |
150
150
| **NSGRuleType_s** | - User Defined <br> - Default | The type of network security group rule used by the flow. |
151
-
> |**MACAddress_s**| MAC Address | MAC address of the NIC at which the flow was captured. |
151
+
> |**MacAddress_s**| MAC Address | MAC address of the NIC at which the flow was captured. |
152
152
> |**Subscription_g**| Subscription of the Azure virtual network / network interface / virtual machine is populated in this field | Applicable only for FlowType = S2S, P2S, AzurePublic, ExternalPublic, MaliciousFlow, and UnknownPrivate flow types (flow types where only one side is Azure). |
153
153
> |**Subscription1_g**| Subscription ID | Subscription ID of virtual network / network interface / virtual machine that the source IP in the flow belongs to. |
154
154
> |**Subscription2_g**| Subscription ID | Subscription ID of virtual network/ network interface / virtual machine that the destination IP in the flow belongs to. |
@@ -214,7 +214,7 @@ The following table details public IP schema. For more information, see [NTAIpDe
214
214
| ----- | ------ | -------- |
215
215
|**TableName**| NTAIpDetails | Table that contains traffic analytics IP details data. |
216
216
|**SubType**| FlowLog | Subtype for the flow logs. Use only **FlowLog**. Other values of SubType are for internal workings of the product. |
0 commit comments