Query law for Azure firewall

How to query the Log Analytics workspace for Azure firewall log for network rules.

Remeber to enable diagnostic settings on the firewall first

AzureDiagnostics
| where Category == "AzureFirewallNetworkRule"
| sort by TimeGenerated desc
| where TimeGenerated > ago(30m)

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.