Skip to content

Commit 611b548

Browse files
Add RecordTypes filtering instructions for Flow Logs
Added instructions for enabling RecordTypes filtering during Flow Log creation and updating existing flow logs. Included cmdlets for managing RecordTypes filtering conditions.
1 parent 8c3b2a2 commit 611b548

1 file changed

Lines changed: 45 additions & 0 deletions

File tree

articles/network-watcher/vnet-flow-logs-filtering.md

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -93,6 +93,51 @@ Set-AzNetworkWatcherFlowLog -Enabled $true -Name 'myVNetFlowLog' -NetworkWatcher
9393
-EnableRetention $true -RetentionPolicyDays 15
9494
```
9595

96+
## Update RecordTypes filtering condition
97+
98+
You can enable RecordTypes filtering during Flow Log creation to choose which flow record formats to collect using the cmdlet below. This helps tailor logging output without generating unnecessary data.
99+
100+
```azurepowershell-interactive
101+
# Enabling RecordTypes filtering while creating flowlog
102+
New-AzNetworkWatcherFlowLog `
103+
-Enabled $true -Name <FlowLog Name> `
104+
-NetworkWatcherName <Network Watcher Name> `
105+
-ResourceGroupName NetworkWatcherRG `
106+
-StorageId <Storage Account ID> `
107+
-TargetResourceId <Target Resource/VNet ID> `
108+
-RecordTypes "<Record Types>"
109+
110+
# Update RecordTypes filtering condition on existing flowlog
111+
Set-AzNetworkWatcherFlowLog `
112+
-Enabled $true -Name <FlowLog Name> `
113+
-NetworkWatcherName <Network Watcher Name> `
114+
-ResourceGroupName <Resource Group Name> `
115+
-StorageId <Storage Account ID> `
116+
-TargetResourceId <Target Resource/VNet ID> `
117+
-RecordTypes "<Record Types>"
118+
119+
120+
# Remove RecordTypes filtering condition from existing flowlog
121+
Set-AzNetworkWatcherFlowLog `
122+
-Enabled $true -Name <FlowLog Name> `
123+
-NetworkWatcherName <Network Watcher Name> `
124+
-ResourceGroupName <Resource Group Name> `
125+
-StorageId <Storage Account ID> `
126+
-TargetResourceId <Target Resource/VNet ID> `
127+
-RecordTypes ""
128+
129+
# Enabling RecordTypes and EnabledFilteringCriteria filtering while creating flowlog
130+
New-AzNetworkWatcherFlowLog `
131+
-Enabled $true -Name <FlowLog Name> `
132+
-NetworkWatcherName <Network Watcher Name> `
133+
-ResourceGroupName <Resource Group Name> `
134+
-StorageId <Storage Account ID> `
135+
-TargetResourceId <Target Resource/VNet ID> `
136+
-EnabledFilteringCriteria "<Filtering Criteria Expression>" `
137+
-RecordTypes "<Record Types>"
138+
139+
```
140+
96141
## Related content
97142

98143
- [Virtual network flow logs overview](vnet-flow-logs-overview.md)

0 commit comments

Comments
 (0)