No edit summary |
|||
| Line 1: | Line 1: | ||
=== Azure App Gateway === | |||
== WAF Logs == | == WAF Logs == | ||
Check for WAF policy breaks with the following Query in Log analytics workspace:<syntaxhighlight lang="sql"> | Check for WAF policy breaks with the following Query in Log analytics workspace:<syntaxhighlight lang="sql"> | ||
Latest revision as of 13:22, 6 November 2025
Azure App Gateway
WAF Logs
Check for WAF policy breaks with the following Query in Log analytics workspace:
AzureDiagnostics
| where TimeGenerated > ago(15m)
| where ResourceProvider == "MICROSOFT.NETWORK" and Category == "ApplicationGatewayFirewallLog"
Check WAF logs for the connections to the backend pools:
AzureDiagnostics
| where ResourceType == "APPLICATIONGATEWAYS" and Category == "ApplicationGatewayAccessLog"
| project TimeGenerated, Resource, backendPoolName_s, requestUri_s, httpStatus_d, clientIP_s, host_s
| summarize connectionCount = count() by backendPoolName_s, host_s