Collect and query Network Data for Azure Virtual Desktop connections

%3CLINGO-SUB%20id%3D%22%5C%26quot%3Blingo-sub-3140397%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3ECollect%20and%20query%20Network%20Data%20for%20Azure%20Virtual%20Desktop%20connections%26lt%3B%5C%2Flingo-sub%26gt%3B%3CLINGO-BODY%20id%3D%22%5C%26quot%3Blingo-body-3140397%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3E%3CP%3EYou%20can%20now%20collect%20network%20data%20for%20Azure%20Virtual%20Desktop%20connections%20using%20the%20NetworkData%20diagnostics%20table%26nbsp%3Bin%20Azure%20Log%20Analytics.%20The%20NetworkData%20table%20records%20round%20trip%20time%20and%20available%20bandwidth%20regularly%20throughout%20the%20connection%20(~%20every%202%20minutes).%20It%20has%20several%20benefits%20for%20Azure%20Virtual%20Desktop%20users%20over%20the%20RemoteFX%20network%20performance%20counters%3A%26lt%3B%5C%2FP%26gt%3B%5Cn%3CUL%3E%5Cn%3CLI%3EEach%20record%20is%20connection-specific%20and%20includes%20the%20correlation%20ID%20of%20the%20Azure%20Virtual%20Desktop%20connection%20that%20can%20be%20tied%20back%20to%20the%20user%26lt%3B%5C%2FLI%26gt%3B%5Cn%3C%2FLI%3E%3CLI%3EThe%20round%20trip%20time%20measured%20in%20this%20table%20is%20protocol-agnostic%20and%20will%20record%20the%20measured%20latency%20for%20TCP%20or%20UDP%20connections%26lt%3B%5C%2FLI%26gt%3B%5Cn%26lt%3B%5C%2FUL%26gt%3B%5Cn%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3E%3CSTRONG%3ESet%20up%26lt%3B%5C%2FSTRONG%26gt%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EThe%20NetworkData%20table%20is%20only%20supported%20in%20commercial%20clouds.%20To%20start%20collecting%20network%20data%2C%20you%E2%80%99ll%20need%20to%20ensure%20your%20Azure%20Virtual%20Desktop%20host%20pools%20have%20diagnostics%20enabled%20and%20that%20the%20NetworkData%20table%20is%20selected.%26nbsp%3BYou%20can%20check%20and%20modify%20these%20settings%20in%20the%20Azure%20Portal%3A%26lt%3B%5C%2FP%26gt%3B%5Cn%3COL%3E%5Cn%3CLI%3EVisit%20your%20Azure%20Virtual%20Desktop%20Host%20Pools%20in%20the%20%3CA%20href%3D%22%5C%26quot%3Bhttps%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_WVD%2FWvdManagerMenuBlade%2Fhostpools%5C%26quot%3B%22%20target%3D%22%5C%26quot%3B_blank%5C%26quot%3B%22%20rel%3D%22%5C%26quot%3Bnofollow%20nofollow%20noopener%20noreferrer%22%20noopener%3D%22%22%20noreferrer%3D%22%22%3EAzure%20Portal%26lt%3B%5C%2FA%26gt%3B.%26lt%3B%5C%2FLI%26gt%3B%5Cn%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA%20href%3D%22%5C%26quot%3Bhttps%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_WVD%2FWvdManagerMenuBlade%2Fhostpools%5C%26quot%3B%22%20target%3D%22%5C%26quot%3B_blank%5C%26quot%3B%22%20rel%3D%22%5C%26quot%3Bnofollow%20nofollow%20noopener%20noreferrer%22%20noopener%3D%22%22%20noreferrer%3D%22%22%3ESelect%20the%20host%20pool%20where%20you%E2%80%99d%20like%20to%20set%20up%20network%20data%2C%20then%20select%20%3CSTRONG%3EDiagnostic%20settings%26lt%3B%5C%2FSTRONG%26gt%3B.%26lt%3B%5C%2FLI%26gt%3B%5Cn%3C%2FSTRONG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA%20href%3D%22%5C%26quot%3Bhttps%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_WVD%2FWvdManagerMenuBlade%2Fhostpools%5C%26quot%3B%22%20target%3D%22%5C%26quot%3B_blank%5C%26quot%3B%22%20rel%3D%22%5C%26quot%3Bnofollow%20nofollow%20noopener%20noreferrer%22%20noopener%3D%22%22%20noreferrer%3D%22%22%3E%3CSTRONG%3ESelect%20%3CSTRONG%3EEdit%20setting%26lt%3B%5C%2FSTRONG%26gt%3B%2C%20or%20%3CSTRONG%3E%2Badd%20diagnostic%20setting%20%26lt%3B%5C%2FSTRONG%26gt%3Bif%20you%20don%E2%80%99t%20have%20a%20diagnostic%20setting%20already.%26lt%3B%5C%2FLI%26gt%3B%5Cn%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA%20href%3D%22%5C%26quot%3Bhttps%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_WVD%2FWvdManagerMenuBlade%2Fhostpools%5C%26quot%3B%22%20target%3D%22%5C%26quot%3B_blank%5C%26quot%3B%22%20rel%3D%22%5C%26quot%3Bnofollow%20nofollow%20noopener%20noreferrer%22%20noopener%3D%22%22%20noreferrer%3D%22%22%3E%3CSTRONG%3E%3CSTRONG%3E%3CSTRONG%3ESelect%20%3CSTRONG%3EallLogs%26lt%3B%5C%2FSTRONG%26gt%3B*%20or%20the%20individual%20categories%20you%20would%20like%20to%20collect.%20Confirm%20%3CSTRONG%3ENetworkData%26lt%3B%5C%2FSTRONG%26gt%3B%20is%20selected.%26lt%3B%5C%2FLI%26gt%3B%5Cn%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA%20href%3D%22%5C%26quot%3Bhttps%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_WVD%2FWvdManagerMenuBlade%2Fhostpools%5C%26quot%3B%22%20target%3D%22%5C%26quot%3B_blank%5C%26quot%3B%22%20rel%3D%22%5C%26quot%3Bnofollow%20nofollow%20noopener%20noreferrer%22%20noopener%3D%22%22%20noreferrer%3D%22%22%3E%3CSTRONG%3E%3CSTRONG%3E%3CSTRONG%3E%3CSTRONG%3E%3CSTRONG%3ESelect%20a%20destination%20(Log%20Analytics%20workspace%20for%20Azure%20Virtual%20Desktop%20Insights%20users)%26lt%3B%5C%2FLI%26gt%3B%5Cn%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FA%3E%3C%2FLI%3E%3CLI%3E%3CA%20href%3D%22%5C%26quot%3Bhttps%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_WVD%2FWvdManagerMenuBlade%2Fhostpools%5C%26quot%3B%22%20target%3D%22%5C%26quot%3B_blank%5C%26quot%3B%22%20rel%3D%22%5C%26quot%3Bnofollow%20nofollow%20noopener%20noreferrer%22%20noopener%3D%22%22%20noreferrer%3D%22%22%3E%3CSTRONG%3E%3CSTRONG%3E%3CSTRONG%3E%3CSTRONG%3E%3CSTRONG%3E%3CSTRONG%3ESave%26lt%3B%5C%2FSTRONG%26gt%3B%20and%20repeat%20for%20other%20host%20pools.%26lt%3B%5C%2FLI%26gt%3B%5Cn%26lt%3B%5C%2FOL%26gt%3B%5Cn%3CP%3E%3CSPAN%20class%3D%22%5C%26quot%3Blia-inline-image-display-wrapper%22%20lia-image-align-center%3D%22%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Fgxcuf89792%2F%5C%26quot%3Bhttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F346476iF4FC90B35815F448%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%5C%26quot%3B%22%20role%3D%22%5C%26quot%3Bbutton%5C%26quot%3B%22%20title%3D%22Diagnostic%20settings.PNG%22%20settings.png%3D%22%22%20alt%3D%22Diagnostic%20settings.PNG%22%20%2F%3E%26lt%3B%5C%2Fspan%26gt%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3E%3CSTRONG%3ESample%20queries%26lt%3B%5C%2FSTRONG%26gt%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EYou%20can%20run%20these%20sample%20Kusto%20queries%20in%20the%26nbsp%3B%3C%2FP%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FSTRONG%3E%3C%2FA%3E%3CA%20href%3D%22%5C%26quot%3Bhttps%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fen-us%252Fazure%252Fazure-monitor%252Flogs%252Flog-analytics-tutorial%2523write-a-query%26amp%3Bdata%3D04%257C01%257CLogan.Silliman%2540microsoft.com%257C8faef6a73e4745dd5a3a08d9eabd7b16%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637798921817219848%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C3000%26amp%3Bsdata%3Dqmd5ed20lDBk9SMafBt31eMdts8SZbj4XR6CRUXV0NI%253D%26amp%3Breserved%3D0%5C%26quot%3B%22%20target%3D%22%5C%26quot%3B_blank%5C%26quot%3B%22%20rel%3D%22%5C%26quot%3Bnofollow%20nofollow%20noopener%20noreferrer%22%20noopener%3D%22%22%20noreferrer%3D%22%22%3ELog%20Analytics%20query%20editor%26lt%3B%5C%2FA%26gt%3B%20or%20find%20them%20using%20the%20QoE%20label.%20For%20each%20query%2C%20replace%26nbsp%3B%3CEM%3Ealias%40domain%26lt%3B%5C%2FEM%26gt%3B%20with%20the%20alias%20of%20the%20user%20you%20want%20to%20look%20up.%26lt%3B%5C%2FP%26gt%3B%5Cn%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3EQuery%20average%20RTT%20and%20bandwidth%3A%26lt%3B%5C%2FP%26gt%3B%5Cn%3CPRE%20class%3D%22%5C%26quot%3Blia-code-sample%22%20language-sql%3D%22%22%3E%3CCODE%3E%2F%2F%2090th%2C%2050th%2C%2010th%20Percentile%20for%20RTT%20in%2010%20min%20increments%5CnWVDConnectionNetworkData%5Cn%7C%20summarize%20RTTP90%3Dpercentile(EstRoundTripTimeInMs%2C90)%2CRTTP50%3Dpercentile(EstRoundTripTimeInMs%2C50)%2CRTTP10%3Dpercentile(EstRoundTripTimeInMs%2C10)%20by%20bin(TimeGenerated%2C10m)%5Cn%7C%20render%20timechart%5Cn%2F%2F%2090th%2C%2050th%2C%2010th%20Percentile%20for%20BW%20in%2010%20min%20increments%5CnWVDConnectionNetworkData%5Cn%7C%20summarize%20BWP90%3Dpercentile(EstAvailableBandwidthKBps%2C90)%2CBWP50%3Dpercentile(EstAvailableBandwidthKBps%2C50)%2CBWP10%3Dpercentile(EstAvailableBandwidthKBps%2C10)%20by%20bin(TimeGenerated%2C10m)%5Cn%7C%20render%20timechart%26lt%3B%5C%2Fcode%26gt%3B%26lt%3B%5C%2Fpre%26gt%3B%5Cn%3C%2FCODE%3E%3C%2FPRE%3E%3C%2FP%3E%3CP%3EQuery%20available%20bandwidth%20for%20a%20specific%20user%3A%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3CPRE%20class%3D%22%5C%26quot%3Blia-code-sample%22%20language-sql%3D%22%22%3E%3CCODE%3Elet%20user%20%3D%20%5C%22alias%40domain%5C%22%3B%5CnWVDConnectionNetworkData%5Cn%7C%20join%20kind%3Dleftouter%20(%5Cn%20%20%20%20WVDConnections%5Cn%20%20%20%20%7C%20distinct%20CorrelationId%2C%20UserName%5Cn)%20on%20CorrelationId%5Cn%7C%20where%20UserName%20%3D%3D%20user%5Cn%7C%20project%20EstAvailableBandwidthKBps%2C%20TimeGenerated%5Cn%7C%20render%20columnchart%20%26lt%3B%5C%2Fcode%26gt%3B%26lt%3B%5C%2Fpre%26gt%3B%5Cn%3C%2FCODE%3E%3C%2FPRE%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3EQuery%20available%20RTT%20for%20a%20specific%20user%3A%26lt%3B%5C%2FP%26gt%3B%5Cn%3CPRE%20class%3D%22%5C%26quot%3Blia-code-sample%22%20language-sql%3D%22%22%3E%3CCODE%3Elet%20user%20%3D%20%5C%22alias%40domain%5C%22%3B%5CnWVDConnectionNetworkData%5Cn%7C%20join%20kind%3Dleftouter%20(%5Cn%20%20%20%20WVDConnections%5Cn%20%20%20%20%7C%20extend%20Protocol%20%3D%20iff(UdpUse%20in%20(%5C%220%5C%22%2C%5C%22%26lt%3B%26gt%3B%5C%22)%2C%5C%22TCP%5C%22%2C%5C%22UDP%5C%22)%5Cn%20%20%20%20%7C%20distinct%20CorrelationId%2C%20UserName%2C%20Protocol%5Cn)%20on%20CorrelationId%5Cn%7C%20where%20UserName%20%3D%3D%20user%5Cn%7C%20project%20EstRoundTripTimeInMs%2C%20TimeGenerated%2C%20Protocol%5Cn%7C%20render%20columnchart%5Cn%26lt%3B%5C%2Fcode%26gt%3B%26lt%3B%5C%2Fpre%26gt%3B%5Cn%3C%2FCODE%3E%3C%2FPRE%3E%3C%2FP%3E%3CP%3ETop%2010%20users%20with%20the%20highest%20RTT%20%26amp%3B%20their%20connecting%20region%3A%26lt%3B%5C%2FP%26gt%3B%5Cn%3CPRE%20class%3D%22%5C%26quot%3Blia-code-sample%22%20language-sql%3D%22%22%3E%3CCODE%3EWVDConnectionNetworkData%5Cn%7C%20join%20kind%3Dleftouter%20(%5Cn%20%20%20%20WVDConnections%5Cn%20%20%20%20%7C%20distinct%20CorrelationId%2C%20UserName%5Cn)%20on%20CorrelationId%5Cn%7C%20summarize%20AvgRTT%3Davg(EstRoundTripTimeInMs)%2CRTT_P95%3Dpercentile(EstRoundTripTimeInMs%2C95)%20by%20UserName%5Cn%7C%20top%2010%20by%20AvgRTT%20desc%26lt%3B%5C%2Fcode%26gt%3B%26lt%3B%5C%2Fpre%26gt%3B%5Cn%3C%2FCODE%3E%3C%2FPRE%3E%3C%2FP%3E%3CP%20style%3D%22%20padding-left%20%3A%2030px%3B%20%22%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3ETop%2010%20users%20with%20the%20lowest%20available%20bandwidth%3A%26lt%3B%5C%2FP%26gt%3B%5Cn%3CPRE%20class%3D%22%5C%26quot%3Blia-code-sample%22%20language-sql%3D%22%22%3E%3CCODE%3EWVDConnectionNetworkData%5Cn%7C%20join%20kind%3Dleftouter%20(%5Cn%20%20%20%20WVDConnections%5Cn%20%20%20%20%7C%20distinct%20CorrelationId%2C%20UserName%5Cn)%20on%20CorrelationId%5Cn%7C%20summarize%20AvgBW%3Davg(EstAvailableBandwidthKBps)%2CBW_P95%3Dpercentile(EstAvailableBandwidthKBps%2C95)%20by%20UserName%5Cn%7C%20top%2010%20by%20AvgBW%20asc%26lt%3B%5C%2Fcode%26gt%3B%26lt%3B%5C%2Fpre%26gt%3B%5Cn%3C%2FCODE%3E%3C%2FPRE%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3E%3CSTRONG%3EGlossary%3A%26lt%3B%5C%2FSTRONG%26gt%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3E%3CU%3EEstimated%20available%20bandwidth%26lt%3B%5C%2FU%26gt%3B%20(kilobytes%20per%20second)%3A%20The%20average%20estimated%20available%20network%20bandwidth%20over%20the%20last%20connection%20time%20interval.%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FU%3E%3C%2FP%3E%3CP%3E%3CU%3EEstimated%20round%20trip%20time%26lt%3B%5C%2FU%26gt%3B%20(milliseconds)%3A%20The%20average%20estimated%20time%20it%20takes%20for%20a%20network%20request%20to%20go%20from%20the%20end%20user%20device%2C%20over%20the%20network%20to%20the%20session%20host%2C%20and%20back%20to%20the%20end%20user%20device%20over%20the%20last%20connection%20time%20interval.%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FU%3E%3C%2FP%3E%3CP%3E%3CU%3ECorrelation%20ID%3A%26lt%3B%5C%2FU%26gt%3B%20The%20activity%20ID%20of%20the%20Azure%20Virtual%20Desktop%20connection%20that%20can%20be%20correlated%20with%20other%20diagnostics%20from%20that%20connection.%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FU%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3E%3CSPAN%3EThank%20you%2C%20and%20please%20feel%20free%20to%26nbsp%3B%26lt%3B%5C%2FSPAN%26gt%3B%3CSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FEM%3E%3C%2FA%3E%3CA%20href%3D%22%5C%26quot%3Bhttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-virtual-desktop-feedback%2Fidb-p%2FAzureVirtualDesktop%5C%26quot%3B%22%20target%3D%22%5C%26quot%3B_blank%5C%26quot%3B%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Esubmit%20feedback%20here%26lt%3B%5C%2FA%26gt%3B%26nbsp%3Bor%20leave%20questions%20on%20this%20post!%26lt%3B%5C%2FSPAN%26gt%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%5Cn%3C%2FP%3E%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%26lt%3B%5C%2Flingo-body%26gt%3B%3CLINGO-LABS%20id%3D%22%5C%26quot%3Blingo-labs-3140397%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3E%3CLINGO-LABEL%3EAVDUpdate%26lt%3B%5C%2Flingo-label%26gt%3B%26lt%3B%5C%2Flingo-labs%26gt%3B%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3C%2FP%3E%3C%2FA%3E%3C%2FLI%3E%3C%2FOL%3E%3C%2FP%3E%3C%2FLI%3E%3C%2FUL%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3C%2FLINGO-SUB%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3140397%22%20slang%3D%22en-US%22%3ECollect%20and%20query%20Network%20Data%20for%20Azure%20Virtual%20Desktop%20connections%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3140397%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20now%20collect%20network%20data%20for%20Azure%20Virtual%20Desktop%20connections%20using%20the%20NetworkData%20diagnostics%20table%26nbsp%3Bin%20Azure%20Log%20Analytics.%20The%20NetworkData%20table%20records%20round%20trip%20time%20and%20available%20bandwidth%20regularly%20throughout%20the%20connection%20(~%20every%202%20minutes).%20It%20has%20several%20benefits%20for%20Azure%20Virtual%20Desktop%20users%20over%20the%20RemoteFX%20network%20performance%20counters%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EEach%20record%20is%20connection-specific%20and%20includes%20the%20correlation%20ID%20of%20the%20Azure%20Virtual%20Desktop%20connection%20that%20can%20be%20tied%20back%20to%20the%20user%3C%2FLI%3E%0A%3CLI%3EThe%20round%20trip%20time%20measured%20in%20this%20table%20is%20protocol-agnostic%20and%20will%20record%20the%20measured%20latency%20for%20TCP%20or%20UDP%20connections%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ESet%20up%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EThe%20NetworkData%20table%20is%20only%20supported%20in%20commercial%20clouds.%20To%20start%20collecting%20network%20data%2C%20you%E2%80%99ll%20need%20to%20ensure%20your%20Azure%20Virtual%20Desktop%20host%20pools%20have%20diagnostics%20enabled%20and%20that%20the%20NetworkData%20table%20is%20selected.%26nbsp%3BYou%20can%20check%20and%20modify%20these%20settings%20in%20the%20Azure%20Portal%3A%3C%2FP%3E%0A%3COL%3E%0A%3CLI%3EVisit%20your%20Azure%20Virtual%20Desktop%20Host%20Pools%20in%20the%20%3CA%20href%3D%22https%3A%2F%2Fportal.azure.com%2F%23blade%2FMicrosoft_Azure_WVD%2FWvdManagerMenuBlade%2Fhostpools%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EAzure%20Portal%3C%2FA%3E.%3C%2FLI%3E%0A%3CLI%3ESelect%20the%20host%20pool%20where%20you%E2%80%99d%20like%20to%20set%20up%20network%20data%2C%20then%20select%20%3CSTRONG%3EDiagnostic%20settings%3C%2FSTRONG%3E.%3C%2FLI%3E%0A%3CLI%3ESelect%20%3CSTRONG%3EEdit%20setting%3C%2FSTRONG%3E%2C%20or%20%3CSTRONG%3E%2Badd%20diagnostic%20setting%20%3C%2FSTRONG%3Eif%20you%20don%E2%80%99t%20have%20a%20diagnostic%20setting%20already.%3C%2FLI%3E%0A%3CLI%3ESelect%20%3CSTRONG%3EallLogs%3C%2FSTRONG%3E*%20or%20the%20individual%20categories%20you%20would%20like%20to%20collect.%20Confirm%20%3CSTRONG%3ENetworkData%3C%2FSTRONG%3E%20is%20selected.%3C%2FLI%3E%0A%3CLI%3ESelect%20a%20destination%20(Log%20Analytics%20workspace%20for%20Azure%20Virtual%20Desktop%20Insights%20users)%3C%2FLI%3E%0A%3CLI%3E%3CSTRONG%3ESave%3C%2FSTRONG%3E%20and%20repeat%20for%20other%20host%20pools.%3C%2FLI%3E%0A%3CLI%3EYou%20can%20verify%20data%20is%20flowing%20by%20returning%20to%20the%20host%20pool%20page%2C%20selecting%20%3CSTRONG%3ELogs%3C%2FSTRONG%3E%2C%20and%20running%20one%20of%20the%20sample%20queries%20below.%20Users%20must%20be%20connecting%20to%20generate%20data%2C%20and%20the%20data%20may%20take%20up%20to%2015%20minutes%20to%20show%20up%20in%20the%20Azure%20Portal.%26nbsp%3B%3C%2FLI%3E%0A%3C%2FOL%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22Diagnostic%20settings.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F346476iF4FC90B35815F448%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Diagnostic%20settings.PNG%22%20alt%3D%22Diagnostic%20settings.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3ESample%20queries%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3EYou%20can%20run%20these%20sample%20Kusto%20queries%20in%20the%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fnam06.safelinks.protection.outlook.com%2F%3Furl%3Dhttps%253A%252F%252Fdocs.microsoft.com%252Fen-us%252Fazure%252Fazure-monitor%252Flogs%252Flog-analytics-tutorial%2523write-a-query%26amp%3Bdata%3D04%257C01%257CLogan.Silliman%2540microsoft.com%257C8faef6a73e4745dd5a3a08d9eabd7b16%257C72f988bf86f141af91ab2d7cd011db47%257C1%257C0%257C637798921817219848%257CUnknown%257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%253D%257C3000%26amp%3Bsdata%3Dqmd5ed20lDBk9SMafBt31eMdts8SZbj4XR6CRUXV0NI%253D%26amp%3Breserved%3D0%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3ELog%20Analytics%20query%20editor%3C%2FA%3E%20or%20find%20them%20using%20the%20QoE%20label.%20For%20each%20query%2C%20replace%26nbsp%3B%3CEM%3Ealias%40domain%3C%2FEM%3E%20with%20the%20alias%20of%20the%20user%20you%20want%20to%20look%20up.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EQuery%20average%20RTT%20and%20bandwidth%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-sql%22%3E%3CCODE%3E%2F%2F%2090th%2C%2050th%2C%2010th%20Percentile%20for%20RTT%20in%2010%20min%20increments%0AWVDConnectionNetworkData%0A%7C%20summarize%20RTTP90%3Dpercentile(EstRoundTripTimeInMs%2C90)%2CRTTP50%3Dpercentile(EstRoundTripTimeInMs%2C50)%2CRTTP10%3Dpercentile(EstRoundTripTimeInMs%2C10)%20by%20bin(TimeGenerated%2C10m)%0A%7C%20render%20timechart%0A%2F%2F%2090th%2C%2050th%2C%2010th%20Percentile%20for%20BW%20in%2010%20min%20increments%0AWVDConnectionNetworkData%0A%7C%20summarize%20BWP90%3Dpercentile(EstAvailableBandwidthKBps%2C90)%2CBWP50%3Dpercentile(EstAvailableBandwidthKBps%2C50)%2CBWP10%3Dpercentile(EstAvailableBandwidthKBps%2C10)%20by%20bin(TimeGenerated%2C10m)%0A%7C%20render%20timechart%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EQuery%20available%20bandwidth%20for%20a%20specific%20user%3A%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%20%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-sql%22%3E%3CCODE%3Elet%20user%20%3D%20%22alias%40domain%22%3B%0AWVDConnectionNetworkData%0A%7C%20join%20kind%3Dleftouter%20(%0A%20%20%20%20WVDConnections%0A%20%20%20%20%7C%20distinct%20CorrelationId%2C%20UserName%0A)%20on%20CorrelationId%0A%7C%20where%20UserName%20%3D%3D%20user%0A%7C%20project%20EstAvailableBandwidthKBps%2C%20TimeGenerated%0A%7C%20render%20columnchart%20%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EQuery%20available%20RTT%20for%20a%20specific%20user%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-sql%22%3E%3CCODE%3Elet%20user%20%3D%20%22alias%40domain%22%3B%0AWVDConnectionNetworkData%0A%7C%20join%20kind%3Dleftouter%20(%0A%20%20%20%20WVDConnections%0A%20%20%20%20%7C%20extend%20Protocol%20%3D%20iff(UdpUse%20in%20(%220%22%2C%22%26lt%3B%26gt%3B%22)%2C%22TCP%22%2C%22UDP%22)%0A%20%20%20%20%7C%20distinct%20CorrelationId%2C%20UserName%2C%20Protocol%0A)%20on%20CorrelationId%0A%7C%20where%20UserName%20%3D%3D%20user%0A%7C%20project%20EstRoundTripTimeInMs%2C%20TimeGenerated%2C%20Protocol%0A%7C%20render%20columnchart%0A%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETop%2010%20users%20with%20the%20highest%20RTT%20%26amp%3B%20their%20connecting%20region%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-sql%22%3E%3CCODE%3EWVDConnectionNetworkData%0A%7C%20join%20kind%3Dleftouter%20(%0A%20%20%20%20WVDConnections%0A%20%20%20%20%7C%20distinct%20CorrelationId%2C%20UserName%0A)%20on%20CorrelationId%0A%7C%20summarize%20AvgRTT%3Davg(EstRoundTripTimeInMs)%2CRTT_P95%3Dpercentile(EstRoundTripTimeInMs%2C95)%20by%20UserName%0A%7C%20top%2010%20by%20AvgRTT%20desc%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22%20padding-left%20%3A%2030px%3B%20%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ETop%2010%20users%20with%20the%20lowest%20available%20bandwidth%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%20class%3D%22lia-code-sample%20language-sql%22%3E%3CCODE%3EWVDConnectionNetworkData%0A%7C%20join%20kind%3Dleftouter%20(%0A%20%20%20%20WVDConnections%0A%20%20%20%20%7C%20distinct%20CorrelationId%2C%20UserName%0A)%20on%20CorrelationId%0A%7C%20summarize%20AvgBW%3Davg(EstAvailableBandwidthKBps)%2CBW_P95%3Dpercentile(EstAvailableBandwidthKBps%2C95)%20by%20UserName%0A%7C%20top%2010%20by%20AvgBW%20asc%3C%2FCODE%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EGlossary%3A%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%3CU%3EEstimated%20available%20bandwidth%3C%2FU%3E%20(kilobytes%20per%20second)%3A%20The%20average%20estimated%20available%20network%20bandwidth%20over%20the%20last%20connection%20time%20interval.%3C%2FP%3E%0A%3CP%3E%3CU%3EEstimated%20round%20trip%20time%3C%2FU%3E%20(milliseconds)%3A%20The%20average%20estimated%20time%20it%20takes%20for%20a%20network%20request%20to%20go%20from%20the%20end%20user%20device%2C%20over%20the%20network%20to%20the%20session%20host%2C%20and%20back%20to%20the%20end%20user%20device%20over%20the%20last%20connection%20time%20interval.%3C%2FP%3E%0A%3CP%3E%3CU%3ECorrelation%20ID%3A%3C%2FU%3E%20The%20activity%20ID%20of%20the%20Azure%20Virtual%20Desktop%20connection%20that%20can%20be%20correlated%20with%20other%20diagnostics%20from%20that%20connection.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EThank%20you%2C%20and%20please%20feel%20free%20to%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fazure-virtual-desktop-feedback%2Fidb-p%2FAzureVirtualDesktop%22%20target%3D%22_blank%22%3Esubmit%20feedback%20here%3C%2FA%3E%26nbsp%3Bor%20leave%20questions%20on%20this%20post!%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3140397%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAVDUpdate%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3159828%22%20slang%3D%22en-US%22%3ERe%3A%20Collect%20and%20query%20Network%20Data%20for%20Azure%20Virtual%20Desktop%20connections%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3159828%22%20slang%3D%22en-US%22%3EGreat%20work!%20I've%20been%20after%20this%20for%20some%20time%20(see%20my%20post%20today%20%3A-D)%3CBR%20%2F%3EHopefully%20it%20wont%20cost%20too%20much%20in%20LA%2C%20as%20its%20only%20every%202%20minutes%20%3A)%3C%2Fimg%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3161193%22%20slang%3D%22en-US%22%3ERe%3A%20Collect%20and%20query%20Network%20Data%20for%20Azure%20Virtual%20Desktop%20connections%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3161193%22%20slang%3D%22en-US%22%3ESadly%20despite%20adding%20the%20diagnostics%20settings%20my%20LA%20workspace%20is%20showing%20no%20signs%20of%20the%20WVDConnectionNetworkData%20metrics.%20Any%20ideas%3F%3CBR%20%2F%3EPaul.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3172676%22%20slang%3D%22en-US%22%3ERe%3A%20Collect%20and%20query%20Network%20Data%20for%20Azure%20Virtual%20Desktop%20connections%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3172676%22%20slang%3D%22en-US%22%3E%3CP%3Ethanks%2C%20great%20feature%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3172759%22%20slang%3D%22en-US%22%3ERe%3A%20Collect%20and%20query%20Network%20Data%20for%20Azure%20Virtual%20Desktop%20connections%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3172759%22%20slang%3D%22en-US%22%3ESame%20issue%20on%20our%20side.%20Activated%20network%20data%20logs%20on%20multiple%20hostpools%20and%20none%20is%20recording%20any%20WVDConnectionNetworkData%20logs.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3174159%22%20slang%3D%22en-US%22%3ERe%3A%20Collect%20and%20query%20Network%20Data%20for%20Azure%20Virtual%20Desktop%20connections%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3174159%22%20slang%3D%22en-US%22%3ENo%20reason%20this%20can't%20be%20achieved%20with%20a%20little%20work%20once%20the%20WVDConnectionNetworkData%20data%20is%20working%20-%20you%20can%20just%20get%20all%20of%20your%20hostpools%20to%20send%20data%20to%20the%20same%20LA%20workspace%20and%20create%20a%20dashboard%20from%20that.%20Maybe%20it%20could%20be%20wrapped%20up%20into%20insights%2C%20but%20I%20guess%20that%20is%20hostpool%20specific.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3180177%22%20slang%3D%22en-US%22%3ERe%3A%20Collect%20and%20query%20Network%20Data%20for%20Azure%20Virtual%20Desktop%20connections%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3180177%22%20slang%3D%22en-US%22%3EYay!%20the%20metrics%20have%20appeared.%20Not%20sure%20this%20is%20because%20I%20logged%20a%20ticket.%20Time%20to%20practice%20my%20inner%20joins%20in%20KQL!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3182947%22%20slang%3D%22en-US%22%3ERe%3A%20Collect%20and%20query%20Network%20Data%20for%20Azure%20Virtual%20Desktop%20connections%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3182947%22%20slang%3D%22en-US%22%3Ethis%20is%20insanely%20helpful%2C%20thanks!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3260019%22%20slang%3D%22en-US%22%3ERe%3A%20Collect%20and%20query%20Network%20Data%20for%20Azure%20Virtual%20Desktop%20connections%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3260019%22%20slang%3D%22en-US%22%3EDoes%20anyone%20have%20any%20problems%20with%20the%20bandwidth%20accuracy%20-%20I'd%20be%20interested%20in%20knowing%20how%20it%20calculates%20available%20bandwidth%20-%20does%20it%20use%20TCP%20window%20size%20to%20determine%20the%20available%20bandwidth%20based%20on%20RTT%20(which%20I%20have%20come%20to%20rely%20on%20quite%20nicely).%3F%3C%2FLINGO-BODY%3E
Microsoft

You can now collect network data for Azure Virtual Desktop connections using the NetworkData diagnostics table in Azure Log Analytics. The NetworkData table records round trip time and available bandwidth regularly throughout the connection (~ every 2 minutes). It has several benefits for Azure Virtual Desktop users over the RemoteFX network performance counters:

  • Each record is connection-specific and includes the correlation ID of the Azure Virtual Desktop connection that can be tied back to the user
  • The round trip time measured in this table is protocol-agnostic and will record the measured latency for TCP or UDP connections

 

Set up

The NetworkData table is only supported in commercial clouds. To start collecting network data, you’ll need to ensure your Azure Virtual Desktop host pools have diagnostics enabled and that the NetworkData table is selected. You can check and modify these settings in the Azure Portal:

  1. Visit your Azure Virtual Desktop Host Pools in the Azure Portal.
  2. Select the host pool where you’d like to set up network data, then select Diagnostic settings.
  3. Select Edit setting, or +add diagnostic setting if you don’t have a diagnostic setting already.
  4. Select allLogs* or the individual categories you would like to collect. Confirm NetworkData is selected.
  5. Select a destination (Log Analytics workspace for Azure Virtual Desktop Insights users)
  6. Save and repeat for other host pools.
  7. You can verify data is flowing by returning to the host pool page, selecting Logs, and running one of the sample queries below. Users must be connecting to generate data, and the data may take up to 15 minutes to show up in the Azure Portal. 

Diagnostic settings.PNG

 

 

Sample queries

You can run these sample Kusto queries in the Log Analytics query editor or find them using the QoE label. For each query, replace alias@domain with the alias of the user you want to look up.

 

Query average RTT and bandwidth:

 

 

// 90th, 50th, 10th Percentile for RTT in 10 min increments
WVDConnectionNetworkData
| summarize RTTP90=percentile(EstRoundTripTimeInMs,90),RTTP50=percentile(EstRoundTripTimeInMs,50),RTTP10=percentile(EstRoundTripTimeInMs,10) by bin(TimeGenerated,10m)
| render timechart
// 90th, 50th, 10th Percentile for BW in 10 min increments
WVDConnectionNetworkData
| summarize BWP90=percentile(EstAvailableBandwidthKBps,90),BWP50=percentile(EstAvailableBandwidthKBps,50),BWP10=percentile(EstAvailableBandwidthKBps,10) by bin(TimeGenerated,10m)
| render timechart

 

 

Query available bandwidth for a specific user:            

 

 

let user = "alias@domain";
WVDConnectionNetworkData
| join kind=leftouter (
    WVDConnections
    | distinct CorrelationId, UserName
) on CorrelationId
| where UserName == user
| project EstAvailableBandwidthKBps, TimeGenerated
| render columnchart 

 

 

 

Query available RTT for a specific user:

 

 

let user = "alias@domain";
WVDConnectionNetworkData
| join kind=leftouter (
    WVDConnections
    | extend Protocol = iff(UdpUse in ("0","<>"),"TCP","UDP")
    | distinct CorrelationId, UserName, Protocol
) on CorrelationId
| where UserName == user
| project EstRoundTripTimeInMs, TimeGenerated, Protocol
| render columnchart

 

 

Top 10 users with the highest RTT:

 

 

WVDConnectionNetworkData
| join kind=leftouter (
    WVDConnections
    | distinct CorrelationId, UserName
) on CorrelationId
| summarize AvgRTT=avg(EstRoundTripTimeInMs),RTT_P95=percentile(EstRoundTripTimeInMs,95) by UserName
| top 10 by AvgRTT desc

 

 

 

Top 10 users with the lowest available bandwidth:

 

 

WVDConnectionNetworkData
| join kind=leftouter (
    WVDConnections
    | distinct CorrelationId, UserName
) on CorrelationId
| summarize AvgBW=avg(EstAvailableBandwidthKBps),BW_P95=percentile(EstAvailableBandwidthKBps,95) by UserName
| top 10 by AvgBW asc

 

 

 

Glossary:

Estimated available bandwidth (kilobytes per second): The average estimated available network bandwidth over the last connection time interval.

Estimated round trip time (milliseconds): The average estimated time it takes for a network request to go from the end user device, over the network to the session host, and back to the end user device over the last connection time interval.

Correlation ID: The activity ID of the Azure Virtual Desktop connection that can be correlated with other diagnostics from that connection.

 

Thank you, and please feel free to submit feedback here or leave questions on this post!

 

 

8 Replies
Great work! I've been after this for some time (see my post today :-D)
Hopefully it wont cost too much in LA, as its only every 2 minutes :)
Sadly despite adding the diagnostics settings my LA workspace is showing no signs of the WVDConnectionNetworkData metrics. Any ideas?
Paul.

thanks, great feature

Same issue on our side. Activated network data logs on multiple hostpools and none is recording any WVDConnectionNetworkData logs.
No reason this can't be achieved with a little work once the WVDConnectionNetworkData data is working - you can just get all of your hostpools to send data to the same LA workspace and create a dashboard from that. Maybe it could be wrapped up into insights, but I guess that is hostpool specific.
Yay! the metrics have appeared. Not sure this is because I logged a ticket. Time to practice my inner joins in KQL!
this is insanely helpful, thanks!
Does anyone have any problems with the bandwidth accuracy - I'd be interested in knowing how it calculates available bandwidth - does it use TCP window size to determine the available bandwidth based on RTT (which I have come to rely on quite nicely).?