用于网络的 Azure MonitorAzure Monitor for Networks

Azure 网络监视器为已部署的所有网络资源提供运行状况指标的全面视图,并且无需任何配置。Azure Monitor for Networks provides a comprehensive view of health and metrics for all deployed network resources, without requiring any configuration. 它还提供对网络监视功能的访问,如连接监视器网络安全组的流日志记录 (NSG)流量分析It also provides access to network monitoring capabilities like Connection Monitor, flow logging for network security groups (NSGs), and Traffic Analytics. 它还提供其他网络诊断功能。And it provides other network diagnostic features.

Azure 网络监视器是围绕以下关键监视组件构建的:Azure Monitor for Networks is structured around these key components of monitoring:

网络运行状况和指标Network health and metrics

Azure 网络监视器的“概览”页面提供了一种轻松的方法来可视化网络资源的清单以及资源运行状况和警报。The Azure Monitor for Networks Overview page provides an easy way to visualize the inventory of your networking resources, together with resource health and alerts. 它分为四个主要功能区域:搜索和筛选、资源运行状况和指标、警报以及依赖项视图。It's divided into four key functional areas: search and filtering, resource health and metrics, alerts, and dependency view.

显示概述页面的屏幕截图Screenshot that shows the Overview page

搜索和筛选Search and filtering

可以使用“订阅”、“资源组”和“类型”等筛选器来自定义资源运行状况和警报视图 。You can customize the resource health and alerts view by using filters like Subscription, Resource Group, and Type.

可使用搜索框搜索资源及其关联资源。You can use the search box to search for resources and their associated resources. 例如,公共 IP 与应用程序网关相关联。For example, a public IP is associated with an application gateway. 搜索公共 IP DNS 名称将同时返回公共 IP 和关联的应用程序网关:A search for the public IP's DNS name will return both the public IP and the associated application gateway:

屏幕截图显示 Azure 网络监视器搜索结果。Screenshot that shows Azure Monitor for Networks search results.

资源运行状况和指标Resource health and metrics

在以下示例中,每个磁贴代表一个资源类型。In the following example, each tile represents a resource type. 该磁贴显示在所有选定订阅上部署的该资源类型的实例数。The tile displays the number of instances of that resource type deployed across all selected subscriptions. 它还显示资源的运行状况状态。It also displays the health status of the resource. 在此示例中,部署了 105 个 ER 和 VPN 连接。In this example, there are 105 ER and VPN connections deployed. 103 个运行正常,2 个不可用。103 are healthy, and 2 are unavailable.

屏幕截图显示 Azure 网络监视器中的资源运行状况和指标。

如果选择不可用的 ER 和 VPN 连接,会看到一个指标视图:If you select the unavailable ER and VPN connections, you'll see a metric view:

屏幕截图显示 Azure 网络监视器中的指标视图。

可以选择网格视图中的任意项。You can select any item in the grid view. 选择“运行状况”列中的图标以获取该连接的资源运行状况。Select the icon in the Health column to get resource health for that connection. 选择“警报”列中的值以转到连接的警报和指标页。Select the value in the Alert column to go to the alerts and metrics page for the connection.

警报Alerts

页面右侧的“警报”框提供所有订阅中选定资源生成的所有警报的视图。The Alert box on the right side of the page provides a view of all alerts generated for the selected resources across all subscriptions. 选择警报计数可转到详细的警报页面。Select the alert counts to go to a detailed alerts page.

“依赖项”视图Dependency view

“依赖项”视图有助于可视化资源的配置方式。Dependency view helps you visualize how a resource is configured. “依赖项”视图当前可用于 Azure 应用程序网关、Azure 虚拟 WAN 和 Azure 负载均衡器。Dependency view is currently available for Azure Application Gateway, Azure Virtual WAN, and Azure Load Balancer. 例如,对于应用程序网关,你可以通过选择指标网格视图中的应用程序网关资源名称来访问“依赖项”视图。For example, for Application Gateway, you can access dependency view by selecting the Application Gateway resource name in the metrics grid view. 可以为虚拟 WAN 和负载均衡器执行相同的操作。You can do the same thing for Virtual WAN and Load Balancer.

屏幕截图显示 Azure 网络监视器中的应用程序网关视图。

应用程序网关的“依赖项”视图提供了前端 IP 如何连接到侦听器、规则和后端池的简化视图。The dependency view for Application Gateway provides a simplified view of how the front-end IPs are connected to the listeners, rules, and backend pool. 连接线条采用颜色编码,并根据后端池运行状况提供其他详细信息。The connecting lines are color coded and provide additional details based on the backend pool health. 该视图还提供了应用程序网关指标和所有相关后端池(如虚拟机规模集和 VM 实例)的指标的详细视图。The view also provides a detailed view of Application Gateway metrics and metrics for all related backend pools, like virtual machine scale set and VM instances.

屏幕截图显示 Azure 网络监视器中的“依赖项”视图。Screenshot that shows dependency view in Azure Monitor for Networks.

通过依赖项图可轻松导航到配置设置。The dependency graph provides easy navigation to configuration settings. 右键单击后端池可访问其他信息。Right-click a backend pool to access other information. 例如,如果后端池是 VM,则可以直接访问 VM Insights 和 Azure 网络观察程序连接疑难解答,以确定连接问题:For example, if the backend pool is a VM, you can directly access VM Insights and Azure Network Watcher connection troubleshooting to identify connectivity issues:

屏幕截图显示 Azure 网络监视器中的依赖项视图菜单。

“依赖项”视图上的搜索和筛选栏提供了一种轻松的方法来搜索图形。The search and filter bar on the dependency view provides an easy way to search through the graph. 例如,如果在上述示例中搜索“AppGWTestRule”,则该视图将纵向缩减为仅显示通过 AppGWTestRule 连接的所有节点:For example, if you search for AppGWTestRule in the previous example, the view will scale down to all nodes connected via AppGWTestRule:

屏幕截图显示 Azure 网络监视器中某个搜索的示例。

可借助各种筛选器纵向缩减到特定路径和状态。Various filters help you scale down to a specific path and state. 例如,从“运行状况状态”列表中仅选择“运行不正常”可显示状态为“运行不正常”的所有边缘 。For example, select only Unhealthy from the Health status list to show all edges for which the state is unhealthy.

选择“查看详细指标”可打开预配置的工作簿,其中提供了应用程序网关、所有后端池资源和前端 IP 的详细指标。Select View detailed metrics to open a preconfigured workbook that provides detailed metrics for the application gateway, all backend pool resources, and front-end IPs.

连接Connectivity

“连接”选项卡提供了一种简单的方法来为选定的一组订阅直观显示通过连接监视器和连接监视器(经典版)配置的所有测试。The Connectivity tab provides an easy way to visualize all tests configured via Connection Monitor and Connection Monitor (classic) for the selected set of subscriptions.

屏幕截图显示 Azure 网络监视器中的“连接”选项卡。

测试按“源”和“目标”磁贴进行分组,并显示每个测试的可访问性状态 。Tests are grouped by Sources and Destinations tiles and display the reachability status for each test. 可访问设置可根据失败的检查 (%) 和 RTT (ms) 提供对可访问性条件的配置的轻松访问。Reachable settings provide easy access to configurations for your reachability criteria, based on checks failed (%) and RTT (ms). 设置值后,每个测试的状态根据选择条件进行更新。After you set the values, the status for each test updates based on the selection criteria.

屏幕截图显示 Azure 网络监视器中的连接测试。Screenshot that shows connectivity tests in Azure Monitor for Networks.

可以选择任意源或目标磁贴来打开指标视图:You can select any source or destination tile to open a metric view:

屏幕截图显示 Azure 网络监视器中的连接指标。Screenshot that shows connectivity metrics in Azure Monitor for Networks.

可以选择网格视图中的任意项。You can select any item in the grid view. 选择“可访问性”列中的图标,以转到“连接监视器”门户页,并查看逐跳拓扑和已识别的影响连接的问题。Select the icon in the Reachability column to go to the Connection Monitor portal page and view the hop-by-hop topology and connectivity affecting issues identified. 选择“警报”列中的值以转到警报。Select the value in the Alert column to go to alerts. 选择“检查失败百分比”和“往返时间(ms)”列中的关系图,以转到所选的连接监视器的指标页 。Select the graphs in the Checks Failed Percent and Round-Trip Time (ms) columns to go to the metrics page for the selected connection monitor.

页面右侧的�“警报”框提供针对所有订阅中配置的连接测试生成的所有警报的视图。The�Alert box on the right side of the page provides a view of all alerts generated for the connectivity tests configured across all subscriptions. 选择警报计数可转到详细的警报页面。Select the alert counts to go to a detailed alerts page.

交通Traffic

通过“流量”选项卡,可以访问为 NSG 流日志配置的所有 NSG,和按位置分组的所选订阅集的流量分析The Traffic tab provides access to all NSGs configured for NSG flow logs and Traffic Analytics for the selected set of subscriptions, grouped by location. 利用此选项卡上提供的搜索功能,可以标识为搜索的 IP 地址配置的 NSG。The search functionality provided on this tab enables you to identify the NSGs configured for the searched IP address. 可以在环境中搜索任意 IP 地址。You can search for any IP address in your environment. 平铺区域视图将显示所有 NSG 和 NSG 流日志,以及流量分析配置状态。The tiled regional view will display all NSGs along with the NSG flow logs and Traffic Analytics configuration status.

屏幕截图显示 Azure 网络监视器中的“流量”选项卡。Screenshot that shows the Traffic tab in Azure Monitor for Networks.

如果选择任何区域磁贴,会显示一个网格视图。If you select any region tile, a grid view appears. 网格通过易于阅读和配置的视图显示 NSG 流日志和流量分析:The grid provides NSG flow logs and Traffic Analytics in a view that's easy to read and configure:

屏幕截图显示 Azure 网络监视器中的流量区域视图。Screenshot that shows the traffic region view in Azure Monitor for Networks.

可以选择网格视图中的任意项。You can select any item in the grid view. 选择“流日志配置状态”列中的图标,以编辑 NSG 流日志和流量分析配置。Select the icon in the Flowlog Configuration Status column to edit the NSG flow log and Traffic Analytics configuration. 选择“警报”列中的值,以转到为所选 NSG 配置的流量警报。Select the value in the Alert column to go to the traffic alerts configured for the selected NSG. 同样,可以通过选择“流量分析工作区”来转到流量分析视图。Similarly, you can go to the Traffic Analytics view by selecting the Traffic Analytics Workspace.

页面右侧的�“警报”框提供所有订阅的所有基于工作区的流量分析警报的视图。The�Alert box on the right side of the page provides a view of all Traffic Analytics workspace-based alerts across all subscriptions. 选择警报计数可转到详细的警报页面。Select the alert counts to go to a detailed alerts page.

诊断工具包Diagnostic Toolkit

诊断工具包提供可用于网络故障排除的所有诊断功能的访问权限。Diagnostic Toolkit provides access to all the diagnostic features available for troubleshooting the network. 可以使用此下拉列表访问数据包捕获VPN 故障排除连接故障排除下一跃点IP 流验证等功能:You can use this drop-down list to access features like packet capture, VPN troubleshooting, connection troubleshooting, next hop, and IP flow verify:

显示“诊断工具包”选项卡的屏幕截图。

已加入资源Onboarded resources

已加入资源有内置工作簿和“依赖项”视图。Onboarded resources have built-in workbooks, and dependency views. 目前加入的资源包括虚拟 WAN、应用程序网关、负载均衡器和 ExpressRoute。Currently onboarded resources are Virtual WAN, Application Gateway, Load Balancer, and ExpressRoute.

疑难解答Troubleshooting

如需常规故障排除指南,请参阅专用的基于工作簿的见解故障排除文章For general troubleshooting guidance, see the dedicated workbook-based insights troubleshooting article. 本部分将帮助你诊断和排除在使用 Azure 网络监视器时可能会遇到的一些常见问题。This section will help you diagnose and troubleshoot some common problems you might encounter when you use Azure Monitor for Networks.

如何解决性能问题和故障?How do I resolve performance problems or failures?

若要了解如何对通过 Azure 网络监视器识别的与网络相关的任何问题进行故障排除,请参阅发生故障的资源的相关故障排除文档。To learn about troubleshooting any networking-related problems you identify with Azure Monitor for Networks, see the troubleshooting documentation for the malfunctioning resource.

下面是一些常用服务的相关故障排除文章的链接。Here are some links to troubleshooting articles for frequently used services. 更多有关这些服务的故障排除文章,请参阅相关服务的目录的“故障排除”部分中的其他文章。For more troubleshooting articles about these services, see the other articles in the Troubleshooting section of the table of contents for the service.

为什么我看不到所选择的所有订阅的资源?Why don't I see the resources for all the subscriptions I've selected?

Azure 网络监视器一次只能显示 5 个订阅的资源。Azure Monitor for Networks can show resources for only five subscriptions at a time.

如何进行更改或将可视化效果添加到 Azure 网络监视器?How do I make changes or add visualizations to Azure Monitor for Networks?

若要进行更改,请选择“编辑模式”以修改工作簿。To make changes, select Edit Mode to modify the workbook. 然后,你可以将所做的更改另存为与指定的订阅和资源组相关联的新工作簿。You can then save your changes as a new workbook that's tied to a designated subscription and resource group.

固定工作簿的任何部分后,时间粒度是多少?What's the time grain after I pin any part of the workbooks?

Azure 网络监视器使用“自动”时间粒度,因此时间粒度基于所选时间范围。Azure Monitor for Networks uses the Auto time grain, so the time grain is based on the selected time range.

固定工作簿的任何部分后,时间范围是多少?What's the time range when any part of a workbook is pinned?

时间范围取决于面板设置。The time range depends on the dashboard settings.

如果想要查看其他数据或生成自己的可视化效果,应该怎么做?What if I want to see other data or make my own visualizations? 如何更改 Azure 网络监视器?How can I make changes to Azure Monitor for Networks?

你可以通过使用编辑模式来编辑在任何边侧面板或详细指标视图中看到的工作簿。You can edit the workbook you see in any side-panel or detailed metric view by using the edit mode. 然后,可以将所做的更改另存为新的工作簿。You can then save your changes as a new workbook.

后续步骤Next steps