Skip to content

Commit 64bf9d2

Browse files
committed
Update monitoring reference: latency probe, additional DNS proxy logs, top flows, flow trace clarifications
1 parent af60a6a commit 64bf9d2

1 file changed

Lines changed: 21 additions & 0 deletions

File tree

articles/firewall/monitor-firewall-reference.md

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -138,6 +138,27 @@ These logs provide valuable insights, such as:
138138
- Whether the Azure Firewall cache was used
139139

140140
**Enabling Additional DNS Proxy Logs**
141+
142+
Before setting up Additional DNS Proxy Logs, you must first enable the feature using Azure PowerShell:
143+
144+
1. Enable logs (pre-requisite) - Run the following commands in Azure PowerShell, replacing placeholders with your values.
145+
146+
```powershell
147+
Set-AzContext -SubscriptionName <SubscriptionName>
148+
$firewall = Get-AzFirewall -ResourceGroupName <ResourceGroupName> -Name <FirewallName>
149+
$firewall.EnableDnstapLogging = $true
150+
Set-AzFirewall -AzureFirewall $firewall
151+
```
152+
153+
2. Disable logs (Optional) - To disable the logs, use the same previous Azure PowerShell command and set the value to *False*.
154+
155+
```powershell
156+
Set-AzContext -SubscriptionName <SubscriptionName>
157+
$firewall = Get-AzFirewall -ResourceGroupName <ResourceGroupName> -Name <FirewallName>
158+
$firewall.EnableDnstapLogging = $false
159+
Set-AzFirewall -AzureFirewall $firewall
160+
```
161+
**Configuring DNS Proxy and Additional DNS Proxy Logs**
141162
1. Enable DNS proxy:
142163
1. Navigate to Azure Firewall DNS settings and Enable DNS Proxy.
143164
2. Configure a custom DNS server or use the default Azure DNS.

0 commit comments

Comments
 (0)