Enable NSG Flow Logs
This template deploys an NSG flow logs resource inside the Network Watcher resource group.
This template enables a new NSG flow logs resource type
Microsoft.Network/networkWatchers/flowLogs. To learn more about how to deploy the template, see the quickstart article.
The flow logs resource is enabled in the (hidden) NetworkWatcherRG resource group that contains the Network Watcher service and related resources. The logs are written to a storage account which is also deployed by the template.
- Enable NSG Flow logs through an ARM template
- Network Watcher Deployment model
- What is the NetworkWatcherRG
- Permissions needed to deploy to NetworkWatcherRG
Network Watcher must be enabled for your subscription. Network Watcher is enabled by default, so unless you have disabled it, this should not be an issue.
Tags: Network Watcher, NSG flow logs, Microsoft.Storage/storageAccounts, Microsoft.Resources/deployments, Microsoft.Network/networkWatchers/flowLogs, JSON, Microsoft.Network/networkSecurityGroups, Microsoft.Network/virtualNetworks