Table: azure_network_watcher - Query Azure Network Watchers using SQL
Azure Network Watcher is a network performance monitoring and diagnostic service that enables you to monitor and diagnose conditions at a network scenario level in, to, and from Azure. It provides you with the ability to understand your network performance and health. With Network Watcher, you can monitor and diagnose your network scenarios via provided metrics and logs.
Table Usage Guide
The azure_network_watcher
table provides insights into Azure Network Watchers within Azure Networking. As a network engineer, explore network-specific details through this table, including network performance and health metrics. Utilize it to uncover information about network conditions, monitor and diagnose network scenarios, and verify network performance.
Examples
List of regions where network watcher is enabled
Determine the areas in which the Azure Network Watcher service is active. This is useful for understanding where network monitoring and diagnostic services are currently deployed in your Azure environment.
select name, regionfrom azure_network_watcher;
select name, regionfrom azure_network_watcher;
List of Network watcher without application tag key
Determine the areas in which Azure Network Watchers are operating without an assigned application tag key. This can be useful to identify potential gaps in your tagging strategy and ensure consistent metadata across your resources.
select name, tagsfrom azure_network_watcherwhere not tags :: JSONB ? 'application';
select name, tagsfrom azure_network_watcherwhere json_extract(tags, '$.application') is null;
Control examples
- CIS v1.3.0 > 6 Networking > 6.5 Ensure that Network Watcher is 'Enabled'
- CIS v1.4.0 > 6 Networking > 6.5 Ensure that Network Watcher is 'Enabled'
- CIS v1.5.0 > 6 Networking > 6.6 Ensure that Network Watcher is 'Enabled'
- CIS v2.0.0 > 6 Networking > 6.6 Ensure that Network Watcher is 'Enabled'
- CIS v2.1.0 > 6 Networking > 6.6 Ensure that Network Watcher is 'Enabled'
- CIS v3.0.0 > 7 Networking > 7.6 Ensure that Network Watcher is 'Enabled' for Azure Regions that are in use
- Deploy network watcher when virtual networks are created
- Network Watcher should be enabled
Schema for azure_network_watcher
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
akas | jsonb | Array of globally unique identifier strings (also known as) for the resource. | |
cloud_environment | text | The Azure Cloud Environment. | |
etag | text | An unique read-only string that changes whenever the resource is updated | |
id | text | Contains ID to identify a network watcher uniquely | |
name | text | = | The friendly name that identifies the network watcher |
provisioning_state | text | The provisioning state of the network watcher resource | |
region | text | The Azure region/location in which the resource is located. | |
resource_group | text | = | The resource group which holds this resource. |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. | |
subscription_id | text | =, !=, ~~, ~~*, !~~, !~~* | The Azure Subscription ID in which the resource is located. |
tags | jsonb | A map of tags for the resource. | |
title | text | Title of the resource. | |
type | text | The resource type of the network watcher |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- azure
You can pass the configuration to the command with the --config
argument:
steampipe_export_azure --config '<your_config>' azure_network_watcher