Network Security Group Flow Log retention period should be 'greater than 90 days'

Docs > Datadog Security > OOTB Rules > Network Security Group Flow Log retention period should be 'greater than 90 days'

Description

To ensure sufficient data retention, it is recommended to set the retention period for your Network Security Group Flow Logs to a minimum of 90 days. By default, the flow logs for Network Security Groups are disabled, so it is essential to enable them to capture information about IP traffic. The logs provide valuable insights into any anomalies or potential breaches, helping you in monitoring and securing your network. However, it is important to consider that increasing the data retention period may lead to higher monthly storage costs based on your data usage.

Remediation

From the console

Go to Network Watcher and select NSG flow logs blade in the Logs section.
Select each Network Security Group from the list.
Ensure Status is set to On.
Ensure Retention (days) setting is greater than 90 days.
Select your storage account in the Storage account field.