{"id":"6e19b9bc-095e-48bd-8e2f-113d6764d0e0","shortId":"xhLNcV","kind":"skill","title":"azure-network-watcher","tagline":"Expert knowledge for Azure Network Watcher development including troubleshooting, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Connection Monitor, NSG/VNet flow logs, packet capture, Traffic Analytics, or Sent","description":"# Azure Network Watcher Skill\n\nThis skill provides expert guidance for Azure Network Watcher. Covers troubleshooting, decision making, limits & quotas, security, configuration, and integrations & coding patterns. It combines local quick-reference content with remote documentation fetching capabilities.\n\n## How to Use This Skill\n\n> **IMPORTANT for Agent**: Use the **Category Index** below to locate relevant sections. For categories with line ranges (e.g., `L35-L120`), use `read_file` with the specified lines. For categories with file links (e.g., `[security.md](security.md)`), use `read_file` on the linked reference file\n\n> **IMPORTANT for Agent**: If `metadata.generated_at` is more than 3 months old, suggest the user pull the latest version from the repository. If `mcp_microsoftdocs` tools are not available, suggest the user install it: [Installation Guide](https://github.com/MicrosoftDocs/mcp/blob/main/README.md)\n\nThis skill requires **network access** to fetch documentation content:\n- **Preferred**: Use `mcp_microsoftdocs:microsoft_docs_fetch` with query string `from=learn-agent-skill`. Returns Markdown.\n- **Fallback**: Use `fetch_webpage` with query string `from=learn-agent-skill&accept=text/markdown`. Returns Markdown.\n\n## Category Index\n\n| Category | Lines | Description |\n|----------|-------|-------------|\n| Troubleshooting | L34-L43 | Diagnosing and automating troubleshooting for outbound connectivity, NSG/admin rules, and VPN gateway/on-premises VPN issues using Network Watcher, Azure CLI, PowerShell, and Automation. |\n| Decision Making | L44-L50 | Guidance for migrating network monitoring: moving from classic Connection Monitor and Network Performance Monitor tests, and switching NSG flow logs to VNet flow logs. |\n| Limits & Quotas | L51-L55 | How to configure and run Network Watcher packet capture, storage and filtering options, and the key limits/quotas (size, duration, concurrency) that apply to captures |\n| Security | L56-L62 | Configuring secure access to Network Watcher with RBAC, using Traffic Analytics for Zero Trust segmentation, and protecting VNet flow logs with managed identities. |\n| Configuration | L63-L78 | Configuring and governing Network Watcher logging: AMA for Connection Monitor, NSG/VNet flow logs setup, schemas, filtering, templates (Bicep/ARM), and Azure Policy enforcement. |\n| Integrations & Coding Patterns | L79-L85 | Using Network Watcher data in tools and code: parsing NSG flow logs with PowerShell, visualizing in Power BI, triggering packet capture from Functions, querying Traffic Analytics with KQL, and integrating with Sentinel. |\n\n### Troubleshooting\n| Topic | URL |\n|-------|-----|\n| Diagnose outbound connection issues with Network Watcher | https://learn.microsoft.com/en-us/azure/network-watcher/connection-troubleshoot-manage |\n| Troubleshoot NSG and admin rules with NSG diagnostics | https://learn.microsoft.com/en-us/azure/network-watcher/diagnose-network-security-rules |\n| Diagnose on-premises VPN connectivity to Azure with Network Watcher | https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-diagnose-on-premises-connectivity |\n| Automate VPN connectivity monitoring with Azure Automation and Network Watcher | https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-monitor-with-azure-automation |\n| Troubleshoot VPN gateways and connections with Azure CLI | https://learn.microsoft.com/en-us/azure/network-watcher/vpn-troubleshoot-cli |\n| Troubleshoot VPN gateways and connections with PowerShell | https://learn.microsoft.com/en-us/azure/network-watcher/vpn-troubleshoot-powershell |\n\n### Decision Making\n| Topic | URL |\n|-------|-----|\n| Migrate from Connection Monitor classic to new Connection Monitor | https://learn.microsoft.com/en-us/azure/network-watcher/migrate-to-connection-monitor-from-connection-monitor-classic |\n| Migrate tests from Network Performance Monitor to Connection Monitor | https://learn.microsoft.com/en-us/azure/network-watcher/migrate-to-connection-monitor-from-network-performance-monitor |\n| Migrate from NSG flow logs to VNet flow logs | https://learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-migrate |\n\n### Limits & Quotas\n| Topic | URL |\n|-------|-----|\n| Use Network Watcher packet capture and understand its limits | https://learn.microsoft.com/en-us/azure/network-watcher/packet-capture-overview |\n\n### Security\n| Topic | URL |\n|-------|-----|\n| Configure RBAC permissions for Azure Network Watcher | https://learn.microsoft.com/en-us/azure/network-watcher/required-rbac-permissions |\n| Apply Zero Trust segmentation using Traffic Analytics | https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-zero-trust |\n| Secure VNet flow logs with managed identities | https://learn.microsoft.com/en-us/azure/network-watcher/vnet-flow-logs-managed-identity |\n\n### Configuration\n| Topic | URL |\n|-------|-----|\n| Configure Azure Monitor Agent for Connection Monitor | https://learn.microsoft.com/en-us/azure/network-watcher/azure-monitor-agent-with-connection-monitor |\n| Install and manage Azure Monitor Agent on Arc servers | https://learn.microsoft.com/en-us/azure/network-watcher/connection-monitor-install-azure-monitor-agent |\n| Understand Connection Monitor Log Analytics data schemas | https://learn.microsoft.com/en-us/azure/network-watcher/connection-monitor-schema |\n| Enable NSG flow logs using Bicep | https://learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-bicep |\n| Configure and manage Azure NSG flow logs | https://learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-manage |\n| Manage NSG flow logs deployment with Azure Policy | https://learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-policy-portal |\n| Enable NSG flow logs using ARM templates | https://learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-template |\n| Govern Traffic Analytics with Azure Policy | https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-policy-portal |\n| Understand Traffic Analytics schema and aggregation | https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-schema |\n| Configure filtering for Azure VNet flow logs | https://learn.microsoft.com/en-us/azure/network-watcher/vnet-flow-logs-filtering |\n| Configure and manage Azure virtual network flow logs | https://learn.microsoft.com/en-us/azure/network-watcher/vnet-flow-logs-manage |\n| Enforce VNet flow logs with Azure Policy | https://learn.microsoft.com/en-us/azure/network-watcher/vnet-flow-logs-policy |\n\n### Integrations & Coding Patterns\n| Topic | URL |\n|-------|-----|\n| Parse and read Azure flow logs with PowerShell | https://learn.microsoft.com/en-us/azure/network-watcher/flow-logs-read |\n| Trigger Network Watcher packet captures from Azure Functions alerts | https://learn.microsoft.com/en-us/azure/network-watcher/packet-capture-alert-triggered |\n| Analyze Traffic Analytics data with KQL queries | https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-queries |\n| Integrate Azure Traffic Analytics with Microsoft Sentinel | https://learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-sentinel |","tags":["azure","network","watcher","agent","skills","microsoftdocs","agent-skills","agentic-skills","agentskill","ai-agents","ai-coding","azure-functions"],"capabilities":["skill","source-microsoftdocs","skill-azure-network-watcher","topic-agent","topic-agent-skills","topic-agentic-skills","topic-agentskill","topic-ai-agents","topic-ai-coding","topic-azure","topic-azure-functions","topic-azure-kubernetes-service","topic-azure-openai","topic-azure-sql-database","topic-azure-storage"],"categories":["Agent-Skills"],"synonyms":[],"warnings":[],"endpointUrl":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-network-watcher","protocol":"skill","transport":"skills-sh","auth":{"type":"none","details":{"cli":"npx skills add MicrosoftDocs/Agent-Skills","source_repo":"https://github.com/MicrosoftDocs/Agent-Skills","install_from":"skills.sh"}},"qualityScore":"0.698","qualityRationale":"deterministic score 0.70 from registry signals: · indexed on github topic:agent-skills · 497 github stars · SKILL.md body (7,187 chars)","verified":false,"liveness":"unknown","lastLivenessCheck":null,"agentReviews":{"count":0,"score_avg":null,"cost_usd_avg":null,"success_rate":null,"latency_p50_ms":null,"narrative_summary":null,"summary_updated_at":null},"enrichmentModel":"deterministic:skill-github:v1","enrichmentVersion":1,"enrichedAt":"2026-04-22T00:53:34.746Z","embedding":null,"createdAt":"2026-04-18T21:59:35.824Z","updatedAt":"2026-04-22T00:53:34.746Z","lastSeenAt":"2026-04-22T00:53:34.746Z","tsv":"'/en-us/azure/network-watcher/azure-monitor-agent-with-connection-monitor':558 '/en-us/azure/network-watcher/connection-monitor-install-azure-monitor-agent':570 '/en-us/azure/network-watcher/connection-monitor-schema':580 '/en-us/azure/network-watcher/connection-troubleshoot-manage':397 '/en-us/azure/network-watcher/diagnose-network-security-rules':408 '/en-us/azure/network-watcher/flow-logs-read':685 '/en-us/azure/network-watcher/migrate-to-connection-monitor-from-connection-monitor-classic':472 '/en-us/azure/network-watcher/migrate-to-connection-monitor-from-network-performance-monitor':484 '/en-us/azure/network-watcher/network-watcher-diagnose-on-premises-connectivity':422 '/en-us/azure/network-watcher/network-watcher-monitor-with-azure-automation':435 '/en-us/azure/network-watcher/nsg-flow-logs-bicep':589 '/en-us/azure/network-watcher/nsg-flow-logs-manage':599 '/en-us/azure/network-watcher/nsg-flow-logs-migrate':496 '/en-us/azure/network-watcher/nsg-flow-logs-policy-portal':610 '/en-us/azure/network-watcher/nsg-flow-logs-template':620 '/en-us/azure/network-watcher/packet-capture-alert-triggered':697 '/en-us/azure/network-watcher/packet-capture-overview':512 '/en-us/azure/network-watcher/required-rbac-permissions':525 '/en-us/azure/network-watcher/traffic-analytics-policy-portal':629 '/en-us/azure/network-watcher/traffic-analytics-queries':707 '/en-us/azure/network-watcher/traffic-analytics-schema':638 '/en-us/azure/network-watcher/traffic-analytics-sentinel':717 '/en-us/azure/network-watcher/traffic-analytics-zero-trust':535 '/en-us/azure/network-watcher/vnet-flow-logs-filtering':648 '/en-us/azure/network-watcher/vnet-flow-logs-manage':659 '/en-us/azure/network-watcher/vnet-flow-logs-managed-identity':545 '/en-us/azure/network-watcher/vnet-flow-logs-policy':669 '/en-us/azure/network-watcher/vpn-troubleshoot-cli':446 '/en-us/azure/network-watcher/vpn-troubleshoot-powershell':456 '/microsoftdocs/mcp/blob/main/readme.md)':162 '3':133 'accept':201 'access':167,300 'admin':401 'agent':82,126,185,199,552,564 'aggreg':635 'alert':694 'ama':331 'analyt':35,308,378,532,575,623,632,700,711 'analyz':698 'appli':291,526 'arc':566 'arm':616 'autom':216,235,423,429 'avail':152 'azur':2,8,38,48,231,344,416,428,442,520,550,562,593,606,625,642,652,665,678,692,709 'azure-network-watch':1 'bi':370 'bicep':586 'bicep/arm':342 'capabl':74 'captur':33,278,293,373,505,690 'categori':85,93,109,205,207 'classic':248,465 'cli':232,443 'code':22,61,348,360,671 'combin':64 'concurr':289 'configur':19,26,58,272,298,321,325,516,546,549,590,639,649 'connect':27,220,249,333,390,414,425,440,451,463,468,480,554,572 'content':69,171 'cover':51 'data':356,576,701 'decis':14,53,236,457 'deploy':604 'descript':209 'develop':11 'diagnos':214,388,409 'diagnost':405 'doc':177 'document':72,170 'durat':288 'e.g':97,113 'enabl':581,611 'enforc':346,660 'expert':5,45 'fallback':189 'fetch':73,169,178,191 'file':103,111,118,123 'filter':281,340,640 'flow':30,259,263,316,336,363,488,492,538,583,595,602,613,644,655,662,679 'function':375,693 'gateway':438,449 'gateway/on-premises':225 'github.com':161 'github.com/microsoftdocs/mcp/blob/main/readme.md)':160 'govern':327,621 'guid':159 'guidanc':46,241 'ident':320,542 'import':80,124 'includ':12 'index':86,206 'instal':156,158,559 'integr':21,60,347,382,670,708 'issu':227,391 'key':285 'knowledg':6 'kql':380,703 'l120':100 'l34':212 'l34-l43':211 'l35':99 'l35-l120':98 'l43':213 'l44':239 'l44-l50':238 'l50':240 'l51':268 'l51-l55':267 'l55':269 'l56':296 'l56-l62':295 'l62':297 'l63':323 'l63-l78':322 'l78':324 'l79':351 'l79-l85':350 'l85':352 'latest':141 'learn':184,198 'learn-agent-skil':183,197 'learn.microsoft.com':396,407,421,434,445,455,471,483,495,511,524,534,544,557,569,579,588,598,609,619,628,637,647,658,668,684,696,706,716 'learn.microsoft.com/en-us/azure/network-watcher/azure-monitor-agent-with-connection-monitor':556 'learn.microsoft.com/en-us/azure/network-watcher/connection-monitor-install-azure-monitor-agent':568 'learn.microsoft.com/en-us/azure/network-watcher/connection-monitor-schema':578 'learn.microsoft.com/en-us/azure/network-watcher/connection-troubleshoot-manage':395 'learn.microsoft.com/en-us/azure/network-watcher/diagnose-network-security-rules':406 'learn.microsoft.com/en-us/azure/network-watcher/flow-logs-read':683 'learn.microsoft.com/en-us/azure/network-watcher/migrate-to-connection-monitor-from-connection-monitor-classic':470 'learn.microsoft.com/en-us/azure/network-watcher/migrate-to-connection-monitor-from-network-performance-monitor':482 'learn.microsoft.com/en-us/azure/network-watcher/network-watcher-diagnose-on-premises-connectivity':420 'learn.microsoft.com/en-us/azure/network-watcher/network-watcher-monitor-with-azure-automation':433 'learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-bicep':587 'learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-manage':597 'learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-migrate':494 'learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-policy-portal':608 'learn.microsoft.com/en-us/azure/network-watcher/nsg-flow-logs-template':618 'learn.microsoft.com/en-us/azure/network-watcher/packet-capture-alert-triggered':695 'learn.microsoft.com/en-us/azure/network-watcher/packet-capture-overview':510 'learn.microsoft.com/en-us/azure/network-watcher/required-rbac-permissions':523 'learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-policy-portal':627 'learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-queries':705 'learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-schema':636 'learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-sentinel':715 'learn.microsoft.com/en-us/azure/network-watcher/traffic-analytics-zero-trust':533 'learn.microsoft.com/en-us/azure/network-watcher/vnet-flow-logs-filtering':646 'learn.microsoft.com/en-us/azure/network-watcher/vnet-flow-logs-manage':657 'learn.microsoft.com/en-us/azure/network-watcher/vnet-flow-logs-managed-identity':543 'learn.microsoft.com/en-us/azure/network-watcher/vnet-flow-logs-policy':667 'learn.microsoft.com/en-us/azure/network-watcher/vpn-troubleshoot-cli':444 'learn.microsoft.com/en-us/azure/network-watcher/vpn-troubleshoot-powershell':454 'limit':16,55,265,497,509 'limits/quotas':286 'line':95,107,208 'link':112,121 'local':65 'locat':89 'log':31,260,264,317,330,337,364,489,493,539,574,584,596,603,614,645,656,663,680 'make':15,54,237,458 'manag':319,541,561,592,600,651 'markdown':188,204 'mcp':147,174 'metadata.generated':128 'microsoft':176,713 'microsoftdoc':148,175 'migrat':243,461,473,485 'monitor':28,245,250,254,334,426,464,469,478,481,551,555,563,573 'month':134 'move':246 'network':3,9,39,49,166,229,244,252,275,302,328,354,393,418,431,476,502,521,654,687 'new':467 'nsg':258,362,399,404,487,582,594,601,612 'nsg/admin':221 'nsg/vnet':29,335 'old':135 'on-premis':410 'option':282 'outbound':219,389 'packet':32,277,372,504,689 'pars':361,675 'pattern':23,62,349,672 'perform':253,477 'permiss':518 'polici':345,607,626,666 'power':369 'powershel':233,366,453,682 'prefer':172 'premis':412 'protect':314 'provid':44 'pull':139 'queri':180,194,376,704 'quick':67 'quick-refer':66 'quota':17,56,266,498 'rang':96 'rbac':305,517 'read':102,117,677 'refer':68,122 'relev':90 'remot':71 'repositori':145 'requir':165 'return':187,203 'rule':222,402 'run':274 'schema':339,577,633 'section':91 'secur':18,57,294,299,513,536 'security.md':114,115 'segment':312,529 'sent':37 'sentinel':384,714 'server':567 'setup':338 'size':287 'skill':41,43,79,164,186,200 'skill-azure-network-watcher' 'source-microsoftdocs' 'specifi':106 'storag':279 'string':181,195 'suggest':136,153 'switch':257 'templat':341,617 'test':255,474 'text/markdown':202 'tool':149,358 'topic':386,459,499,514,547,673 'topic-agent' 'topic-agent-skills' 'topic-agentic-skills' 'topic-agentskill' 'topic-ai-agents' 'topic-ai-coding' 'topic-azure' 'topic-azure-functions' 'topic-azure-kubernetes-service' 'topic-azure-openai' 'topic-azure-sql-database' 'topic-azure-storage' 'traffic':34,307,377,531,622,631,699,710 'trigger':371,686 'troubleshoot':13,52,210,217,385,398,436,447 'trust':311,528 'understand':507,571,630 'url':387,460,500,515,548,674 'use':24,77,83,101,116,173,190,228,306,353,501,530,585,615 'user':138,155 'version':142 'virtual':653 'visual':367 'vnet':262,315,491,537,643,661 'vpn':224,226,413,424,437,448 'watcher':4,10,40,50,230,276,303,329,355,394,419,432,503,522,688 'webpag':192 'zero':310,527","prices":[{"id":"c7a57321-9b8d-49cb-bc11-5d362af2b2d4","listingId":"6e19b9bc-095e-48bd-8e2f-113d6764d0e0","amountUsd":"0","unit":"free","nativeCurrency":null,"nativeAmount":null,"chain":null,"payTo":null,"paymentMethod":"skill-free","isPrimary":true,"details":{"org":"MicrosoftDocs","category":"Agent-Skills","install_from":"skills.sh"},"createdAt":"2026-04-18T21:59:35.824Z"}],"sources":[{"listingId":"6e19b9bc-095e-48bd-8e2f-113d6764d0e0","source":"github","sourceId":"MicrosoftDocs/Agent-Skills/azure-network-watcher","sourceUrl":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-network-watcher","isPrimary":false,"firstSeenAt":"2026-04-18T21:59:35.824Z","lastSeenAt":"2026-04-22T00:53:34.746Z"}],"details":{"listingId":"6e19b9bc-095e-48bd-8e2f-113d6764d0e0","quickStartSnippet":null,"exampleRequest":null,"exampleResponse":null,"schema":null,"openapiUrl":null,"agentsTxtUrl":null,"citations":[],"useCases":[],"bestFor":[],"notFor":[],"kindDetails":{"org":"MicrosoftDocs","slug":"azure-network-watcher","github":{"repo":"MicrosoftDocs/Agent-Skills","stars":497,"topics":["agent","agent-skills","agentic-skills","agentskill","ai","ai-agents","ai-coding","azure","azure-functions","azure-kubernetes-service","azure-openai","azure-sql-database","azure-storage","azure-virtual-machine","claude-code","github-copilot","microsoft-learn","openai-codex","skills"],"license":"cc-by-4.0","html_url":"https://github.com/MicrosoftDocs/Agent-Skills","pushed_at":"2026-04-19T02:43:40Z","description":"Curated Agent Skills for Microsoft & Azure – giving AI coding assistants structured, real-time expertise from Microsoft Learn docs.","skill_md_sha":"ab324ac657fe0317820f6873b83101b0140f5d55","skill_md_path":"skills/azure-network-watcher/SKILL.md","default_branch":"main","skill_tree_url":"https://github.com/MicrosoftDocs/Agent-Skills/tree/main/skills/azure-network-watcher"},"layout":"multi","source":"github","category":"Agent-Skills","frontmatter":{"name":"azure-network-watcher","description":"Expert knowledge for Azure Network Watcher development including troubleshooting, decision making, limits & quotas, security, configuration, and integrations & coding patterns. Use when configuring Connection Monitor, NSG/VNet flow logs, packet capture, Traffic Analytics, or Sentinel integrations, and other Azure Network Watcher related development tasks. Not for Azure Monitor (use azure-monitor), Azure Networking (use azure-networking), Azure Virtual Network (use azure-virtual-network), Azure Virtual Network Manager (use azure-virtual-network-manager).","compatibility":"Requires network access. Uses mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage to retrieve documentation."},"skills_sh_url":"https://skills.sh/MicrosoftDocs/Agent-Skills/azure-network-watcher"},"updatedAt":"2026-04-22T00:53:34.746Z"}}