turbot/oci_insights

Query: oci_vcn_subnet_flow_logs_not_configured_count

Usage

powerpipe query oci_insights.query.oci_vcn_subnet_flow_logs_not_configured_count

SQL

select
count(s.*) as value,
'Flow Logs Disabled' as label,
case
count(s.*)
when 0 then 'ok'
else 'alert'
end as type
from
oci_core_subnet as s
left join oci_logging_log as l on s.id = l.configuration -> 'source' ->> 'resource'
where
l.is_enabled is null
or not l.is_enabled
and s.lifecycle_state <> 'TERMINATED';

Dashboards

The query is used in the dashboards: