Difference between revisions of "Kusto queries FW"

From UVOO Tech Wiki
Jump to navigation Jump to search
(Created page with "``` AzureDiagnostics | where msg_s contains "10.x.x.x" | project msg_s ``` ``` AzureDiagnostics | where ResourceType == "AZUREFIREWALLS" and action_s == "Deny" and src_ip_s =...")
(No difference)

Revision as of 19:54, 3 May 2024

AzureDiagnostics
| where msg_s contains "10.x.x.x"
| project msg_s
AzureDiagnostics
| where ResourceType == "AZUREFIREWALLS" and action_s == "Deny" and src_ip_s == "source_ip" and dest_ip_s == "destination_ip"