AzureNetworkAnalytics_CL not being populated after creating v2 NSG Flow Logs with Traffic Analysis

Josh Madakor 15

After configuring v2 NSG Flow Logs with Analytics enabled, the AzureNetworkAnalytics_CL table will not even be created within the target Log Analytics Workspace. I have tried deleting the whole network watcher resource, NSGs, diagnostic settings, and flow logs and re-creating them, but the 'AzureNetworkAnalytics_CL' table will NOT create. This is happening in more than one tenant

KapilAnanth-MSFT 35,416 Reputation points Microsoft Employee

2023-04-27T09:35:42.1766667+00:00

@Josh Madakor

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

I see @Priya Kumar has provided a detailed explanation

Let us know if you need more details

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Cheers,

Kapil
KapilAnanth-MSFT 35,416 Reputation points Microsoft Employee

2023-05-02T09:02:53.77+00:00

@Josh Madakor

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Thanks,

Kapil
KapilAnanth-MSFT 35,416 Reputation points Microsoft Employee

2023-05-03T12:41:58.9333333+00:00

@Josh Madakor

We noticed your recent experience on the Q&A community platform for this thread was a downvote.

However, the survey we are taking is testimony of our team providing timely attention to reported issue and partnering with customer to ensure their voice reaches the engineering team to improve the product.

If you feel our team members or the community have been providing right level of support and your scenario has got timely response, we would like to request you to reconsider the feedback.

In case, you felt otherwise based on your support experience, please let me know where you are stuck and we shall isolate the issue and work on it.

Thanks for your continued contribution on Q&A and appreciate much for taking the time to share your feedback.

We are eager to know what could have been done better to evolve your experience to a 5* star rating. Your candid feedback is very important to us.

Looking forward to your reply.
KapilAnanth-MSFT 35,416 Reputation points Microsoft Employee

2023-05-04T10:29:56.0433333+00:00

@Josh Madakor

Reaching out to check if there are any questions on this.

Please let us know if we can be of any further assistance here.

Thanks,

Kapil

1 answer

Priya Kumar 1,096 Reputation points Microsoft Employee

2023-04-27T07:09:45.03+00:00

Hello @Josh Madakor ,

Thanks for reaching out to the Q and A platform.

Please make sure that you are running the Query on the right Log Analytics workspace, that has been attached in the NSG flow log.

Here is the observation on the lab I have created.

Flow Log been created:

Which has been attached to the workspace as mentioned below, and its Version 2 flow log:

Now running the query on the workspace:

I have a workspace, where it is not attached to the NSG flow log, there I could see that AzureNetworkAnalytics_CL not been recognized.

Regards,

Priya Kumar
Please sign in to rate this answer.
Paul Schofield 0 Reputation points Microsoft Employee

2024-02-01T16:06:13.8466667+00:00

This didn't answer the question at all. I'm having the same issue.

KapilAnanth-MSFT 35,416 Reputation points Microsoft Employee

2024-02-02T05:31:21.7366667+00:00

@Paul Schofield

Can you confirm if the Workspace where you are running the query is attached to the Flow Logs?

Can you just run the below and share the results.

AzureNetworkAnalytics_CL | where SubType_s == "FlowLog"

Cheers,

Kapil
Sign in to comment