Azure Documentation

Network Watcher

Network Watcher provides monitoring and diagnostic capabilities for Azure networking resources. It enables visibility into the network topology, packet capture, connection troubleshooting, and more.

Overview

Network Watcher helps you maintain a reliable, high‑performance network in Azure. Key components include:

Getting Started

Enable Network Watcher in a region using Azure CLI:

az network watcher configure \
    --resource-group MyResourceGroup \
    --locations eastus \
    --enabled true

Features

Topology

Generate a visual map of your virtual network and its connections.

az network watcher topology \
    --resource-group MyResourceGroup \
    --location eastus

Connection Monitor

Continuously monitor connectivity between two endpoints.

az network watcher connection-monitor create \
    --name MyConnMonitor \
    --resource-group MyResourceGroup \
    --location eastus \
    --source-resource MyVM \
    --dest-address 8.8.8.8 \
    --dest-port 53

Configuration

Network Watcher settings are stored per region. Use the Azure portal or CLI to adjust thresholds, alerts, and storage accounts for logs.

Diagnostics

Capture packets on a VM NIC for detailed analysis:

az network watcher packet-capture create \
    --resource-group MyResourceGroup \
    --vm MyVM \
    --storage-account mystorage \
    --capture-size 100

SDK & API

Integrate Network Watcher programmatically via Azure SDKs.

const { NetworkManagementClient } = require("@azure/arm-network");
const client = new NetworkManagementClient(credential, subscriptionId);
await client.networkWatchers.get("eastus", "myWatcher");

FAQ

Is Network Watcher free?
Network Watcher itself is free; you pay for resources like storage used for packet captures.
Can I use Network Watcher across multiple regions?
Enable it separately in each region you want to monitor.

References