Query: All flow log resources should be in enabled state

Description

Audit for flow log resources to verify if flow log status is enabled. Enabling flow logs allows to log information about IP traffic flowing. It can be used for optimizing network flows, monitoring throughput, verifying compliance, detecting intrusions and more.

Query

Tables used in this query:

• azure_network_watcher_flow_log
• azure_subscription

Controls using this query:

• All flow log resources should be in enabled state

SQL