NSG Flow Log time interval too short

Shijun Lv 66 Reputation points Microsoft Employee
2022-11-21T13:16:27.76+00:00

Hi experts,

May I ask if it is possible to change the log interval of NSG flow log?
From doc https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-overview#pricing
Logs are collected at 1-min interval through the Azure platform, which means the file will be updated every minutes.

However, the storage account is charged at transaction times. Although the price unit is writing operation per 10, 000, the price is still not low for NSG flow log if it is at 1-min interval.

For example, the amount of write operation for NSG flow log for single mac address per month will be 60 * 24 * 30 = 43,200.
May I ask if is possible to make the time interval become larger? For instance, 1-hour interval?

Or is there any way to connect the NSG team members?

Ref: https://azure.microsoft.com/en-us/pricing/details/storage/data-lake/

Thanks, and Regards,
Shijun

Azure Network Watcher
Azure Network Watcher
An Azure service that is used to monitor, diagnose, and gain insights into network performance and health.
157 questions
0 comments No comments
{count} votes

Accepted answer
  1. KapilAnanth-MSFT 35,001 Reputation points Microsoft Employee
    2022-11-22T06:04:59.867+00:00

    Hi @Shijun Lv ,

    Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.
    I understand that you would like to know if there is a way to change the default 1-minute interval for NSG Flow logs.

    As of now, we do not have an option to specify the interval at which the Platform collects and updates Flow logs.

    If you wish you may vote in the below forum requesting this feature. All the feedback shared in these forums are monitored and reviewed by the Microsoft engineering teams responsible for building Azure

    Azure Feedback Hub

    Thanks,
    Kapil

    ----------------------------------------------------------------------------------------------------------------

    Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

    0 comments No comments

0 additional answers

Sort by: Most helpful