Firewall Logs

Occasional Visitor

How can I access the Firewall Logs?

1 Reply

@CHERYL_LOBO 

 

Which Firewall?  CEF and Sylog Firewall devices will be in:  

 

CommonSecurityLog
| summarize count() by DeviceVendor 

or 

 

Syslog

AzureFirewall

 

AzureDiagnostics 
| where ResourceType == "AZUREFIREWALLS" 
| summarize count() by Category, TimeGenerated