Remediation
From Azure Portal
- Navigate to
Network Watcher. - Under
Logs, selectFlow logs. - Click
Add filter. - From the
Filterdrop-down menu, selectFlow log type. - From the
Valuedrop-down menu, checkVirtual networkonly. - Click
Apply. - Click the name of a virtual network flow log.
- Under
Storage Account, setRetention daysto0,90, or a number greater than 90. IfRetention daysis set to0, the logs are retained indefinitely with no retention policy. - Repeat steps 7 and 8 for each virtual network flow log requiring remediation.
From Azure CLI
Run the following command update the retention policy for a flow log in a network watcher, setting retention to 0, 90, or a number greater than 90:
az network watcher flow-log update --location <location> --name <flow-log> --retention <number-of-days>
Repeat for each virtual network flow log requiring remediation.