← GalleryAzure Firewall Nat traffic✨ Emoji Combos/(?P<protocol>\w+)\s*request\s*from\s*(?P<source_address>\d{1,3}.\d{1,3}.\d{1,3}.\d{1,3}):(?P<source_port>\d+)\s*to\s*(?P<destination_address>\d{1,3}.\d{1,3}.\d{1,3}.\d{1,3}):(?P<destination_port>\d+).\s*was\s*DNAT'ed\s*to\s*(?P<post_nat_ip>\d{1,3}.\d{1,3}.\d{1,3}.\d{1,3}):(?P<post_nat_destination_port>\d+).\s*Rule\s*Collection:\s*(?P<rule_collection>[^\s.]+).\s*Rule:\s*(?P<rule>[^\s}]+)/gmPCRE2+03 years ago✓ Pre-loaded
About this regex
This regex extracts details from Azure Firewall logs when a network request is DNAT'ed to a different destination. It captures protocol, source and destination IPs/ports, the post-NAT IP and port, and the names of the rule collection and rule. Useful for monitoring NAT rule matches, troubleshooting connectivity, and analyzing firewall traffic patterns.