Logging setup for AWS ELB access logs| Cloud Security Plus

Network traffic from Azure resources can be filtered in an Azure virtual network using a network security group. A network security group contains security rules that allow or deny network traffic from Azure resources.

Note down the location of the network security group which will be used.

Enable network watcher for the location previously noted.If already enabled, then continue.

After opening, click on the regions drop down button.

Enter network watcher in the search bar.

Select the location previously noted (the rest of the options need not be changed).

Select a subscription and select an existing resource group or create a new resource group.

Enter storage accounts in the search bar.

Search for network watcher in the search bar.
Click on NSG Flow Logs under the Logs pane.
Select the NSG for which you would like to configure flow logs.
Click the On button to enable NSG flow logs.
Select any of the NSG log versions (version 2 is recommended) and click on configure a storage account.
Select the subscription account and select the storage account which was created in the previous step.
Click on OK
Keep the number of retention days as 1 or higher.
Click on Save. (The rest of the settings in the page need not be changed)