{"id":1508,"date":"2019-03-27T00:00:00","date_gmt":"2019-03-27T00:00:00","guid":{"rendered":"https:\/\/azure.microsoft.com\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines"},"modified":"2025-06-19T04:27:24","modified_gmt":"2025-06-19T11:27:24","slug":"analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines","status":"publish","type":"post","link":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/","title":{"rendered":"Analysis of network connection data with Azure Monitor for virtual machines"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Azure Monitor for virtual machines (VMs) collects network connection data that you can use to analyze the dependencies and network traffic of your VMs. You can analyze the number of live and failed connections, bytes sent and received, and the connection dependencies of your VMs down to the process level. If malicious connections are detected it will include information about those IP addresses and threat level. The newly released <strong>VMBoundPort<\/strong> data set enables analysis of open ports and their connections for security analysis.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To begin analyzing this data, you will need to be <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/insights\/vminsights-onboard\" target=\"_blank\" rel=\"noreferrer noopener\">on-boarded to Azure Monitor for VMs<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"workbooks\">Workbooks<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you would like to start your analysis with a prebuilt, editable report you can try out some of the Workbooks we ship with Azure Monitor for VMs. Once on-boarded you navigate to Azure Monitor and select <strong>Virtual Machines (preview)<\/strong> from the insights menu section. From here, you can navigate to the <strong>Performance or Map tab<\/strong> to see a link for <strong>View Workbook<\/strong> that will open the Workbook gallery which includes the following Workbooks that analyze our network data:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">Connections overview<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Failed connections<\/li>\n\n\n\n<li class=\"wp-block-list-item\">TCP traffic<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Traffic comparison<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Active ports<\/li>\n\n\n\n<li class=\"wp-block-list-item\">Open ports<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">These editable reports let you analyze your connection data for a single VM, groups of VMs, and virtual machine scale sets.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"log-analytics\">Log Analytics<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you want to use Log Analytics to analyze the data, you can navigate to Azure Monitor and select <strong>Logs<\/strong> to begin querying the data. The logs view will show the name of the workspace that has been selected and the schema within that workspace. Under the<strong> ServiceMap <\/strong>data type you will find two tables:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"wp-block-list-item\">VMBoundPort<\/li>\n\n\n\n<li class=\"wp-block-list-item\">VMConnection<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You can copy and paste the queries below into the Log Analytics query box to run them. Please note, you will need to edit a few of the examples below to provide the name of a computer that you want to query.<\/p>\n\n\n\n<figure class=\"wp-block-image has-custom-border\"><img decoding=\"async\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp\" alt=\"Screenshot of copying and pasting queries into the Log Analytics query box\" style=\"border-radius:0px\" title=\"Screenshot of copying and pasting queries into the Log Analytics query box\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"common-queries\">Common queries<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Review the count of ports open on your VMs, which is useful when assessing which VMs configuration and security vulnerabilities<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; auto-links: false; gutter: false; title: ; quick-code: false; notranslate\" title=\"\">\nVMBoundPort\n| where Ip != \"127.0.0.1\"\n| summarize by Computer, Machine, Port, Protocol\n| summarize OpenPorts=count() by Computer, Machine\n| order by OpenPorts desc\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">List the bound ports on your VMs, which is useful when assessing which VMs configuration and security vulnerabilities.<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; auto-links: false; gutter: false; title: ; quick-code: false; notranslate\" title=\"\">\nVMBoundPort\n| distinct Computer, Port, ProcessName\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">Analyze network activity by port to determine how your application or service is configured.<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; auto-links: false; gutter: false; title: ; quick-code: false; notranslate\" title=\"\">\nVMBoundPort\n| where Ip != \"127.0.0.1\"\n| summarize BytesSent=sum(BytesSent), BytesReceived=sum(BytesReceived), LinksEstablished=sum(LinksEstablished), LinksTerminated=sum(LinksTerminated), arg_max(TimeGenerated, LinksLive) by Machine, Computer, ProcessName, Ip, Port, IsWildcardBind\n| project-away TimeGenerated\n| order by Machine, Computer, Port, Ip, ProcessName\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">Bytes sent and received trends for your VMs.<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; auto-links: false; gutter: false; title: ; quick-code: false; notranslate\" title=\"\">\nVMConnection\n| summarize sum(BytesSent), sum(BytesReceived) by bin(TimeGenerated,1hr), Computer\n| order by Computer desc\n\/\/| limit 5000\n| render timechart\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">If you have a lot of computers in your workspace, you may want to uncomment the limit statement in the example above. You can use the chart tools to view either bytes sent or received, and to filter down to specific computers.<\/p>\n\n\n\n<figure class=\"wp-block-image has-custom-border\"><img decoding=\"async\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/59117028-f2a7-4e56-8dde-082fea7321bc.webp\" alt=\"Screenshot of chart tools being used to view Bytes sent or received\" style=\"border-radius:0px\" title=\"Screenshot of chart tools being used to view Bytes sent or received\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Connection failures over time, to determine if the failure rate is stable or changing.<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; auto-links: false; gutter: false; title: ; quick-code: false; notranslate\" title=\"\">\nVMConnection\n| where Computer == \n| extend bythehour = datetime_part(\"hour\", TimeGenerated)\n| project bythehour, LinksFailed\n| summarize failCount = count() by bythehour\n| sort by bythehour asc\n| render timechart\n<\/pre><\/div>\n\n\n<p class=\"wp-block-paragraph\">Link status trends, to analyze the behavior and connection status of a machine.<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; auto-links: false; gutter: false; title: ; quick-code: false; notranslate\" title=\"\">\nVMConnection\n| where Computer == \n| summarize  dcount(LinksEstablished), dcount(LinksLive), dcount(LinksFailed), dcount(LinksTerminated) by bin(TimeGenerated, 1h)\n| render timechart\n<\/pre><\/div>\n\n\n<figure class=\"wp-block-image has-custom-border\"><img decoding=\"async\" src=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/b308be9d-4320-43ec-b2cf-e153ebf2db98.webp\" alt=\"Screenshot of line chart showing query results from the last 24 hours\" style=\"border-radius:0px\" title=\"Screenshot of line chart showing query results from the last 24 hours\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"getting-started-with-log-queries-in-azure-monitor-for-vms\">Getting started with log queries in Azure Monitor for VMs<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To learn more about Azure Monitor for VMs, please read our overview, \u201c<a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/insights\/vminsights-overview\" target=\"_blank\" rel=\"noreferrer noopener\">What is Azure Monitor for VMs (preview)<\/a>.\u201d If you are already using Azure Monitor for VMs, you can find additional example queries in our documentation for <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/azure-monitor\/insights\/vminsights-log-search\" target=\"_blank\" rel=\"noreferrer noopener\">querying data with Log Analytics<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Azure Monitor for virtual machines (VMs) collects network connection data that you can use to analyze the dependencies and network traffic of your VMs.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ms_queue_id":[],"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","_alt_title":"","footnotes":"","msx_community_cta_settings":[]},"categories":[1456,1482],"tags":[],"audience":[3054,3053],"content-type":[],"product":[1533],"tech-community":[],"topic":[],"coauthors":[328],"class_list":["post-1508","post","type-post","status-publish","format-standard","hentry","category-devops","category-management-and-governance","audience-business-decision-makers","audience-it-decision-makers","product-azure-monitor","review-flag-1680286581-295","review-flag-1-1680286581-825","review-flag-vm-1680286585-143"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Analysis of network connection data with Azure Monitor for virtual machines | Microsoft Azure Blog<\/title>\n<meta name=\"description\" content=\"Azure Monitor for virtual machines (VMs) collects network connection data that you can use to analyze the dependencies and network traffic of your VMs.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Analysis of network connection data with Azure Monitor for virtual machines | Microsoft Azure Blog\" \/>\n<meta property=\"og:description\" content=\"Azure Monitor for virtual machines (VMs) collects network connection data that you can use to analyze the dependencies and network traffic of your VMs.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Azure Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/microsoftazure\" \/>\n<meta property=\"article:published_time\" content=\"2019-03-27T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-19T11:27:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp\" \/>\n<meta name=\"author\" content=\"Scott Kinghorn\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@azure\" \/>\n<meta name=\"twitter:site\" content=\"@azure\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Scott Kinghorn\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/\"},\"author\":[{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/scott-kinghorn\/\",\"@type\":\"Person\",\"@name\":\"Scott Kinghorn\"}],\"headline\":\"Analysis of network connection data with Azure Monitor for virtual machines\",\"datePublished\":\"2019-03-27T00:00:00+00:00\",\"dateModified\":\"2025-06-19T11:27:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/\"},\"wordCount\":508,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp\",\"articleSection\":[\"DevOps\",\"Management and governance\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/\",\"name\":\"Analysis of network connection data with Azure Monitor for virtual machines | Microsoft Azure Blog\",\"isPartOf\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp\",\"datePublished\":\"2019-03-27T00:00:00+00:00\",\"dateModified\":\"2025-06-19T11:27:24+00:00\",\"description\":\"Azure Monitor for virtual machines (VMs) collects network connection data that you can use to analyze the dependencies and network traffic of your VMs.\",\"breadcrumb\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#primaryimage\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp\",\"contentUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog home\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"DevOps\",\"item\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/devops\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Analysis of network connection data with Azure Monitor for virtual machines\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#website\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"name\":\"Microsoft Azure Blog\",\"description\":\"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.\",\"publisher\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization\",\"name\":\"Microsoft Azure Blog\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"contentUrl\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp\",\"width\":512,\"height\":512,\"caption\":\"Microsoft Azure Blog\"},\"image\":{\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/microsoftazure\",\"https:\/\/x.com\/azure\",\"https:\/\/www.instagram.com\/microsoftdeveloper\/\",\"https:\/\/www.linkedin.com\/company\/16188386\",\"https:\/\/www.youtube.com\/user\/windowsazure\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/c702e5edd662b328b49b7e1180cab117\",\"name\":\"shakir\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g7664e653ea371ce16eaf75e9fa8952c4\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g\",\"caption\":\"shakir\"},\"sameAs\":[\"https:\/\/azure.microsoft.com\"],\"url\":\"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/shakir\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Analysis of network connection data with Azure Monitor for virtual machines | Microsoft Azure Blog","description":"Azure Monitor for virtual machines (VMs) collects network connection data that you can use to analyze the dependencies and network traffic of your VMs.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/","og_locale":"en_US","og_type":"article","og_title":"Analysis of network connection data with Azure Monitor for virtual machines | Microsoft Azure Blog","og_description":"Azure Monitor for virtual machines (VMs) collects network connection data that you can use to analyze the dependencies and network traffic of your VMs.","og_url":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/","og_site_name":"Microsoft Azure Blog","article_publisher":"https:\/\/www.facebook.com\/microsoftazure","article_published_time":"2019-03-27T00:00:00+00:00","article_modified_time":"2025-06-19T11:27:24+00:00","og_image":[{"url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp","type":"","width":"","height":""}],"author":"Scott Kinghorn","twitter_card":"summary_large_image","twitter_creator":"@azure","twitter_site":"@azure","twitter_misc":{"Written by":"Scott Kinghorn","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#article","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/"},"author":[{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/scott-kinghorn\/","@type":"Person","@name":"Scott Kinghorn"}],"headline":"Analysis of network connection data with Azure Monitor for virtual machines","datePublished":"2019-03-27T00:00:00+00:00","dateModified":"2025-06-19T11:27:24+00:00","mainEntityOfPage":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/"},"wordCount":508,"commentCount":0,"publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#primaryimage"},"thumbnailUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp","articleSection":["DevOps","Management and governance"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/","name":"Analysis of network connection data with Azure Monitor for virtual machines | Microsoft Azure Blog","isPartOf":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#primaryimage"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#primaryimage"},"thumbnailUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp","datePublished":"2019-03-27T00:00:00+00:00","dateModified":"2025-06-19T11:27:24+00:00","description":"Azure Monitor for virtual machines (VMs) collects network connection data that you can use to analyze the dependencies and network traffic of your VMs.","breadcrumb":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#primaryimage","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp","contentUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2019\/03\/3bba4bf7-c087-4d77-84b1-547fcc9174ba.webp"},{"@type":"BreadcrumbList","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog home","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/"},{"@type":"ListItem","position":2,"name":"DevOps","item":"https:\/\/azure.microsoft.com\/en-us\/blog\/category\/devops\/"},{"@type":"ListItem","position":3,"name":"Analysis of network connection data with Azure Monitor for virtual machines"}]},{"@type":"WebSite","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#website","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","name":"Microsoft Azure Blog","description":"Get the latest Azure news, updates, and announcements from the Azure blog. From product updates to hot topics, hear from the Azure experts.","publisher":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/azure.microsoft.com\/en-us\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#organization","name":"Microsoft Azure Blog","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","contentUrl":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-content\/uploads\/2024\/06\/microsoft_logo.webp","width":512,"height":512,"caption":"Microsoft Azure Blog"},"image":{"@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/microsoftazure","https:\/\/x.com\/azure","https:\/\/www.instagram.com\/microsoftdeveloper\/","https:\/\/www.linkedin.com\/company\/16188386","https:\/\/www.youtube.com\/user\/windowsazure"]},{"@type":"Person","@id":"https:\/\/azure.microsoft.com\/en-us\/blog\/#\/schema\/person\/c702e5edd662b328b49b7e1180cab117","name":"shakir","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g7664e653ea371ce16eaf75e9fa8952c4","url":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9342c7c05bb16548741bc5cd3a3e3b7ee0c8e746844ad2cc582db5beb5514c6f?s=96&d=mm&r=g","caption":"shakir"},"sameAs":["https:\/\/azure.microsoft.com"],"url":"https:\/\/azure.microsoft.com\/en-us\/blog\/author\/shakir\/"}]}},"msxcm_display_generated_audio":false,"msxcm_animated_featured_image":null,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Azure Blog","distributor_original_site_url":"https:\/\/azure.microsoft.com\/en-us\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/1508","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/comments?post=1508"}],"version-history":[{"count":1,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/1508\/revisions"}],"predecessor-version":[{"id":42459,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/posts\/1508\/revisions\/42459"}],"wp:attachment":[{"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/media?parent=1508"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/categories?post=1508"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tags?post=1508"},{"taxonomy":"audience","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/audience?post=1508"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/content-type?post=1508"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/product?post=1508"},{"taxonomy":"tech-community","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/tech-community?post=1508"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/topic?post=1508"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/azure.microsoft.com\/en-us\/blog\/wp-json\/wp\/v2\/coauthors?post=1508"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}