Network Watcher for diagnostics in Azure - Mini Project: Build & Apply

Network Watcher for diagnostics

📖 Scenario: You are managing a small Azure environment. You want to set up Network Watcher to monitor and diagnose network issues in your virtual network.

🎯 Goal: Create an Azure Network Watcher resource named NetworkWatcher_eastus in the eastus region, enable it for your subscription, and configure a diagnostic setting to send logs to a storage account.

📋 What You'll Learn

Create a Network Watcher resource named NetworkWatcher_eastus in the eastus region

Verify Network Watcher is enabled for the subscription in eastus

Create a diagnostic setting named MyDiagSetting for NetworkWatcher_eastus

Configure the diagnostic setting to send logs to an existing storage account named mystorageaccount

💡 Why This Matters

🌍 Real World

Network Watcher helps monitor and diagnose network issues in Azure, essential for maintaining healthy cloud infrastructure.

💼 Career

Cloud engineers and network administrators use Network Watcher to troubleshoot connectivity and security issues in Azure environments.

1

Create Network Watcher resource

Create a Network Watcher resource named NetworkWatcher_eastus in the eastus region using Azure CLI syntax.

Azure

# Your code here to create Network Watcher resource

Need a hint?

Use az network watcher configure with --locations eastus and --enabled true.

2

Verify Network Watcher for subscription

Verify Network Watcher for your subscription in the eastus region using Azure CLI.

Azure

az network watcher configure --resource-group NetworkWatcherRG --locations eastus --enabled true
# Your code here to verify Network Watcher for subscription

Need a hint?

Use az network watcher show with --name NetworkWatcher_eastus and --resource-group NetworkWatcherRG.

3

Create diagnostic setting for Network Watcher

Create a diagnostic setting named MyDiagSetting for the Network Watcher resource NetworkWatcher_eastus that sends logs to the storage account mystorageaccount using Azure CLI.

Azure

az network watcher configure --resource-group NetworkWatcherRG --locations eastus --enabled true
az network watcher show --resource-group NetworkWatcherRG --name NetworkWatcher_eastus
# Your code here to create diagnostic setting

Need a hint?

Use az monitor diagnostic-settings create with --name MyDiagSetting, --resource <resource ID>, and --storage-account mystorageaccount.

4

Verify and finalize Network Watcher diagnostics setup

Add the final command to verify the diagnostic settings for NetworkWatcher_eastus using Azure CLI.

Azure

az network watcher configure --resource-group NetworkWatcherRG --locations eastus --enabled true
az network watcher show --resource-group NetworkWatcherRG --name NetworkWatcher_eastus
resource_id=$(az network watcher show --resource-group NetworkWatcherRG --name NetworkWatcher_eastus --query id -o tsv)
az monitor diagnostic-settings create --name MyDiagSetting --resource $resource_id --storage-account mystorageaccount --logs '[{"category": "NetworkSecurityGroupEvent", "enabled": true}]'
# Your code here to verify diagnostic settings

Need a hint?

Use az monitor diagnostic-settings list with --resource <resource ID> to verify.