Edit

Share via

Queries for the NatGatewayFlowlogsV1 table

  • Article

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Total allowed packets and bytes sent per NatGateway IP and Destination IP

Total packets and bytes sent per NatGateway IP and Destination IP, that was allowed by the NAT Gateway.

NatGatewayFlowlogsV1
| where TimeGenerated > ago(1d)
| summarize PacketsSentTotal = sum(PacketsSent), BytesSentTotal = sum(BytesSent) by DestinationIP, NatGatewayIP

Total allowed packets and bytes sent per NatGateway IP and Source IP

Total packets and bytes sent per NatGateway IP and Source IP, that was allowed by the NAT Gateway.

NatGatewayFlowlogsV1
| where TimeGenerated > ago(1d)
| summarize PacketsSentTotal = sum(PacketsSent), BytesSentTotal = sum(BytesSent) by SourceIP, NatGatewayIP