Display S2S Connection Name instead of remoteIP

%3CLINGO-SUB%20id%3D%22lingo-sub-2698384%22%20slang%3D%22en-US%22%3EDisplay%20S2S%20Connection%20Name%20instead%20of%20remoteIP%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2698384%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20using%20the%20below%20query%20for%20the%20Disconnected%20status%2C%20we%20also%20required%20the%20connection%20name%20of%20the%26nbsp%3B%3C%2FP%3E%3CP%3EremoteIP_s.%26nbsp%3B%20Is%20there%20any%20table%20with%20the%20connection%20name%20to%20join%20with%20the%20query.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3BAzureDiagnostics%3C%2FP%3E%3CP%3E%26nbsp%3B%7C%20where%20TimeGenerated%20%26gt%3B%20ago(24h)%3C%2FP%3E%3CP%3E%7C%20where%20Category%20%3D%3D%20%22TunnelDiagnosticLog%22%20and%20(status_s%20%3D%3D%20%22Disconnected%22)%3C%2FP%3E%3CP%3E%26nbsp%3B%7C%20project%20TimeGenerated%2C%20Resource%20%2C%20status_s%2C%20remoteIP_s%2C%20stateChangeReason_s%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hello All,

 

We are using the below query for the Disconnected status, we also required the connection name of the 

remoteIP_s.  Is there any table with the connection name to join with the query.

 

 AzureDiagnostics

 | where TimeGenerated > ago(24h)

| where Category == "TunnelDiagnosticLog" and (status_s == "Disconnected")

 | project TimeGenerated, Resource , status_s, remoteIP_s, stateChangeReason_s

 

Thank you!

1 Reply
Hi,
Please see https://docs.microsoft.com/en-us/azure/vpn-gateway/troubleshoot-vpn-with-azure-diagnostics for information about the different tables with VPN events.

If you can not find what you are looking for there, workbooks might be a solution for you. With workbooks you can query multiple data sources and visualize the result together. You could then query your VPN devices to find a name based on the IP adress.