Queries for the AZFWFlowTrace table

For information on using these queries in the Azure portal, see Log Analytics tutorial. For the REST API, see Query.

Azure Firewall flow trace logs

Identify flow traces across Azure Firewall instances. Log contains flow information, flags and the time period when the flows were recorded.

AZFWFlowTrace
| where Flag == "INVALID"
| order by TimeGenerated desc
| take 100