Log Analytics as search medium

[artisticcheese]

It's not possible to use search via Log Analytics for NSG logs? I see a lot of third party tools is mentioned but why not Log Analytics?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: f1fa6c20-b0a4-a593-ae3f-caa62aedd89c
• Version Independent ID: e6cae9b1-e822-894e-11ff-985d305743cc
• Content: Read NSG flow logs
• Content Source: articles/network-watcher/network-watcher-read-nsg-flow-logs.md
• Service: network-watcher
• GitHub Login: @damendo
• Microsoft Alias: damendo

[TravisCragg-MSFT]

@artisticcheese Right now, NSG Flow logs are sent to a storage account, not to Log Analytics. In order for Log Analytics (or any other analytics source) to get the data, you must export the data programmatically. The process to export to Log Analytics is described in the doc here. There is currently not a native way to export the logs to Log analytics.

If you would like us to change this in the future, please leave your feedback at Azure Networking's feedback.azure.com page.

We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

[artisticcheese]

It is available now looks like. Am I missing something? https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics

[TravisCragg-MSFT]

@artisticcheese you are correct, I am the one who is missing something! This document is intended to be an example of how to programatically read NSG logs from an Azure Storage account.

It does need to be called out in this document that the native Azure Log Analytics solution is elsewhere. I am going to re-open and assign the issue to the content author to evaluate and update as appropriate.

[damendo]

Have added a mention of Log Analytics/Traffic Analytics. Changes will be out in a day.

[damendo]

please-close