Note

Access to this page requires authorization. You can try signing in or .

Access to this page requires authorization. You can try .

Set-AzNetworkWatcherFlowLog

Updates flow log resource.

Syntax

SetByName (Default)

Set-AzNetworkWatcherFlowLog
 -NetworkWatcherName <String>
 -ResourceGroupName <String>
 -Name <String>
 -TargetResourceId <String>
 -StorageId <String>
 -Enabled <Boolean>
 [-EnabledFilteringCriteria <String>]
 [-RecordType <String>]
 [-EnableRetention <Boolean>]
 [-RetentionPolicyDays <Int32>]
 [-FormatType <String>]
 [-UserAssignedIdentityId <String>]
 [-FormatVersion <Int32>]
 [-Tag <Hashtable>]
 [-Force]
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

SetByResource

Set-AzNetworkWatcherFlowLog
 -NetworkWatcher <PSNetworkWatcher>
 -Name <String>
 -TargetResourceId <String>
 -StorageId <String>
 -Enabled <Boolean>
 [-EnabledFilteringCriteria <String>]
 [-RecordType <String>]
 [-EnableRetention <Boolean>]
 [-RetentionPolicyDays <Int32>]
 [-FormatType <String>]
 [-UserAssignedIdentityId <String>]
 [-FormatVersion <Int32>]
 [-Tag <Hashtable>]
 [-Force]
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

SetByResourceWithTA

Set-AzNetworkWatcherFlowLog
 -NetworkWatcher <PSNetworkWatcher>
 -Name <String>
 -TargetResourceId <String>
 -StorageId <String>
 -Enabled <Boolean>
 [-EnabledFilteringCriteria <String>]
 [-RecordType <String>]
 [-EnableRetention <Boolean>]
 [-RetentionPolicyDays <Int32>]
 [-FormatType <String>]
 [-UserAssignedIdentityId <String>]
 [-FormatVersion <Int32>]
 [-EnableTrafficAnalytics]
 [-TrafficAnalyticsWorkspaceId <String>]
 [-TrafficAnalyticsInterval <Int32>]
 [-Tag <Hashtable>]
 [-Force]
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

SetByNameWithTA

Set-AzNetworkWatcherFlowLog
 -NetworkWatcherName <String>
 -ResourceGroupName <String>
 -Name <String>
 -TargetResourceId <String>
 -StorageId <String>
 -Enabled <Boolean>
 [-EnabledFilteringCriteria <String>]
 [-RecordType <String>]
 [-EnableRetention <Boolean>]
 [-RetentionPolicyDays <Int32>]
 [-FormatType <String>]
 [-UserAssignedIdentityId <String>]
 [-FormatVersion <Int32>]
 [-EnableTrafficAnalytics]
 [-TrafficAnalyticsWorkspaceId <String>]
 [-TrafficAnalyticsInterval <Int32>]
 [-Tag <Hashtable>]
 [-Force]
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

SetByLocation

Set-AzNetworkWatcherFlowLog
 -Location <String>
 -Name <String>
 -TargetResourceId <String>
 -StorageId <String>
 -Enabled <Boolean>
 [-EnabledFilteringCriteria <String>]
 [-RecordType <String>]
 [-EnableRetention <Boolean>]
 [-RetentionPolicyDays <Int32>]
 [-FormatType <String>]
 [-UserAssignedIdentityId <String>]
 [-FormatVersion <Int32>]
 [-Tag <Hashtable>]
 [-Force]
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

SetByLocationWithTA

Set-AzNetworkWatcherFlowLog
 -Location <String>
 -Name <String>
 -TargetResourceId <String>
 -StorageId <String>
 -Enabled <Boolean>
 [-EnabledFilteringCriteria <String>]
 [-RecordType <String>]
 [-EnableRetention <Boolean>]
 [-RetentionPolicyDays <Int32>]
 [-FormatType <String>]
 [-UserAssignedIdentityId <String>]
 [-FormatVersion <Int32>]
 [-EnableTrafficAnalytics]
 [-TrafficAnalyticsWorkspaceId <String>]
 [-TrafficAnalyticsInterval <Int32>]
 [-Tag <Hashtable>]
 [-Force]
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

SetByResourceId

Set-AzNetworkWatcherFlowLog
 -ResourceId <String>
 -TargetResourceId <String>
 -StorageId <String>
 -Enabled <Boolean>
 [-EnabledFilteringCriteria <String>]
 [-RecordType <String>]
 [-EnableRetention <Boolean>]
 [-RetentionPolicyDays <Int32>]
 [-FormatType <String>]
 [-UserAssignedIdentityId <String>]
 [-FormatVersion <Int32>]
 [-Tag <Hashtable>]
 [-Force]
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

SetByResourceIdWithTA

Set-AzNetworkWatcherFlowLog
 -ResourceId <String>
 -TargetResourceId <String>
 -StorageId <String>
 -Enabled <Boolean>
 [-EnabledFilteringCriteria <String>]
 [-RecordType <String>]
 [-EnableRetention <Boolean>]
 [-RetentionPolicyDays <Int32>]
 [-FormatType <String>]
 [-UserAssignedIdentityId <String>]
 [-FormatVersion <Int32>]
 [-EnableTrafficAnalytics]
 [-TrafficAnalyticsWorkspaceId <String>]
 [-TrafficAnalyticsInterval <Int32>]
 [-Tag <Hashtable>]
 [-Force]
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

SetByInputObject

Set-AzNetworkWatcherFlowLog
 -InputObject <PSFlowLogResource>
 [-UserAssignedIdentityId <String>]
 [-Force]
 [-DefaultProfile <IAzureContextContainer>]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

Description

Updates flow log resource.

Examples

Example 1

$flowLog = Get-AzNetworkWatcherFlowLog -Location eastus -Name pstest
$flowLog.Enabled = $true
$flowLog.Format.Version = 2
$flowLog | Set-AzNetworkWatcherFlowLog -Force
Name : pstest
Id : /subscriptions/bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb/resourceGroups/NetworkWatcherRG/provid
 ers/Microsoft.Network/networkWatchers/NetworkWatcher_eastus/FlowLogs/pstest
Etag : W/"e939e1e6-1509-4d7a-9e89-1ea532f6f222"
ProvisioningState : Succeeded
Location : eastus
TargetResourceId : /subscriptions/bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb/resourceGroups/MyFlowLog/provide
 rs/Microsoft.Network/networkSecurityGroups/MyNSG
StorageId : /subscriptions/bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb/resourceGroups/FlowLogsV2Demo/provider
 s/Microsoft.Storage/storageAccounts/MyStorage
Enabled : True
RetentionPolicy : {
 "Days": 0,
 "Enabled": false
 }
Format : {
 "Type": "JSON",
 "Version": 2
 }
FlowAnalyticsConfiguration : {}

Example 2

Updates flow log resource. (autogenerated)

Set-AzNetworkWatcherFlowLog -Enabled $true -Name 'cert01' -NetworkWatcherName nw1 -ResourceGroupName myresourcegroup -StorageId /subscriptions/00000000-0000-0000-0000-00000000000000000/resourceGroups/FlowLogsV2Demo/providers/Microsoft.Storage/storageAccounts/MyStorage -TargetResourceId <String>

Parameters

-Confirm

Prompts you for confirmation before running the cmdlet.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False
Aliases:cf

Parameter sets

-DefaultProfile

The credentials, account, tenant, and subscription used for communication with Azure.

Parameter properties

Type:IAzureContextContainer
Default value:None
Supports wildcards:False
DontShow:False
Aliases:AzContext, AzureRmContext, AzureCredential

Parameter sets

-Enabled

Flag to enable/disable flow logging.

Parameter properties

Type:Boolean
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-EnabledFilteringCriteria

Optional field to filter network traffic logs.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-EnableRetention

Flag to enable/disable retention.

Parameter properties

Type:

Nullable<T>[Boolean]

Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-EnableTrafficAnalytics

Flag to enable/disable TrafficAnalytics

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-Force

Do not ask for confirmation if you want to overwrite a resource

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-FormatType

The file type of flow log. The only supported value now is 'JSON'.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-FormatVersion

The version (revision) of the flow log.

Parameter properties

Type:

Nullable<T>[Int32]

Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-InputObject

Flow lof object.

Parameter properties

Type:PSFlowLogResource
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-Location

Location of the network watcher.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-Name

The flow log name.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False
Aliases:FlowLogName

Parameter sets

-NetworkWatcher

The network watcher resource.

Parameter properties

Type:PSNetworkWatcher
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-NetworkWatcherName

The name of network watcher.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-RecordType

Optional field to filter network traffic logs based on flow states. Specify one or more flow record state codes as a comma-separated list (example: B,E). Use empty string ("") to collect all records. RecordTypes is an alias of RecordType; both map to the same underlying parameter.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False
Aliases:RecordTypes

Parameter sets

-ResourceGroupName

The name of the network watcher resource group.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-ResourceId

FlowLog resource ID.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-RetentionPolicyDays

Number of days to retain flow log records.

Parameter properties

Type:

Nullable<T>[Int32]

Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-StorageId

ID of the storage account which is used to store the flow log.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-Tag

A hashtable which represents resource tags.

Parameter properties

Type:Hashtable
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-TargetResourceId

ID of network security group to which flow log will be applied.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-TrafficAnalyticsInterval

The interval in minutes which would decide how frequently TA service should do flow analytics.

Parameter properties

Type:

Nullable<T>[Int32]

Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-TrafficAnalyticsWorkspaceId

Resource Id of the attached workspace.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-UserAssignedIdentityId

ResourceId of the user assigned identity to be assigned to Flowlog.

Parameter properties

Type:String
Default value:None
Supports wildcards:False
DontShow:False

Parameter sets

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Parameter properties

Type:SwitchParameter
Default value:None
Supports wildcards:False
DontShow:False
Aliases:wi

Parameter sets

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Inputs

PSNetworkWatcher

String

PSFlowLogResource

Outputs

PSFlowLogResource

Related Links


Feedback

Was this page helpful?