Merge pull request #309842 from Srijan-Chak012/patch-8

Add RecordTypes filtering instructions for Flow Logs

Author: v-ccolin

articles/network-watcher/vnet-flow-logs-filtering.md

@@ -6,7 +6,7 @@ author: halkazwini
 ms.author: halkazwini
 ms.service: azure-network-watcher
 ms.topic: how-to
-ms.date: 11/18/2025
+ms.date: 12/26/2025
 ---
 
 # Filter virtual network flow logs (preview)
@@ -93,6 +93,55 @@ Set-AzNetworkWatcherFlowLog -Enabled $true -Name 'myVNetFlowLog' -NetworkWatcher
     -EnableRetention $true -RetentionPolicyDays 15
 ```
 
+## Update RecordTypes filtering condition
+
+You can enable RecordTypes filtering during flow log creation by choosing which flow record formats to collect in order to tailor logging output without generating unnecessary data.
+
+```azurepowershell-interactive
+# Enable RecordTypes filtering while creating flowlog 
+New-AzNetworkWatcherFlowLog `
+  -Enabled $true -Name <FlowLog Name> `
+  -NetworkWatcherName <Network Watcher Name> `
+  -ResourceGroupName NetworkWatcherRG `
+  -StorageId <Storage Account ID> `
+  -TargetResourceId <Target Resource/VNet ID> `
+  -RecordTypes "<Record Types>"
+```
+
+```azurepowershell-interactive
+# Update RecordTypes filtering condition on existing flow log
+Set-AzNetworkWatcherFlowLog `
+  -Enabled $true  -Name <FlowLog Name> `
+  -NetworkWatcherName <Network Watcher Name> `
+  -ResourceGroupName <Resource Group Name> `
+  -StorageId <Storage Account ID> `
+  -TargetResourceId <Target Resource/VNet ID> `
+  -RecordTypes "<Record Types>"
+```
+
+```azurepowershell-interactive
+# Remove RecordTypes filtering condition from existing flow log
+Set-AzNetworkWatcherFlowLog `
+  -Enabled $true  -Name <FlowLog Name> `
+  -NetworkWatcherName <Network Watcher Name> `
+  -ResourceGroupName <Resource Group Name> `
+  -StorageId <Storage Account ID> `
+  -TargetResourceId <Target Resource/VNet ID> `
+  -RecordTypes ""
+```
+
+```azurepowershell-interactive
+# Enable RecordTypes and EnabledFilteringCriteria filtering while creating flow log
+New-AzNetworkWatcherFlowLog `
+  -Enabled $true -Name <FlowLog Name> `
+  -NetworkWatcherName <Network Watcher Name> `
+  -ResourceGroupName <Resource Group Name> `
+  -StorageId <Storage Account ID> `
+  -TargetResourceId <Target Resource/VNet ID> `
+  -EnabledFilteringCriteria "<Filtering Criteria Expression>" `
+  -RecordTypes "<Record Types>"
+```
+
 ## Related content
 
 - [Virtual network flow logs overview](vnet-flow-logs-overview.md)