Forum Discussion
venu15
Apr 06, 2023Copper Contributor
Kusto Query for troubleshooting the Network Security Group
Hi Team, i need some help on Kusto Query for troubleshooting the Network Security Group connectivity between source IP and Destination IP, can someone please help in Kusto Query to check the ...
sdtslmn
Apr 10, 2023MCT
AzureDiagnostics
| where ResourceType == "NETWORKSECURITYGROUPS"
| where Category == "NetworkSecurityGroupFlowEvent"
| where properties_s_protocol_s == "TCP" // Change this to "UDP" if necessary
| where properties_s_srcIp_s == "10.226.16.165" and properties_s_destIp_s == "159.123.12.3"
| project TimeGenerated, SourceIP = properties_s_srcIp_s, DestinationIP = properties_s_destIp_s,
SourcePort = properties_s_srcPort_d, DestinationPort = properties_s_destPort_d,
Protocol = properties_s_protocol_s, TrafficFlow = properties_s_trafficDirection_s,
TrafficStatus = properties_s_trafficStatus_s, RuleName = properties_s_ruleName_s
| order by TimeGenerated desc
| where ResourceType == "NETWORKSECURITYGROUPS"
| where Category == "NetworkSecurityGroupFlowEvent"
| where properties_s_protocol_s == "TCP" // Change this to "UDP" if necessary
| where properties_s_srcIp_s == "10.226.16.165" and properties_s_destIp_s == "159.123.12.3"
| project TimeGenerated, SourceIP = properties_s_srcIp_s, DestinationIP = properties_s_destIp_s,
SourcePort = properties_s_srcPort_d, DestinationPort = properties_s_destPort_d,
Protocol = properties_s_protocol_s, TrafficFlow = properties_s_trafficDirection_s,
TrafficStatus = properties_s_trafficStatus_s, RuleName = properties_s_ruleName_s
| order by TimeGenerated desc