Query: network_security_group_flow_logs_disabled_count

select
  count(*) as value,
  'Flow Logs Disabled' as label,
  case
    count(*)
    when 0 then 'ok'
    else 'alert'
  end as type
from
  azure_network_security_group
where
  flow_logs is null;