Azure Network Watcher

You can configure collecting Azure Network Watcher logs using a standard data source:

Collection Method Description
Standard data source overview Forward different types of flow logs to Cortex XSIAM from Azure Network Watcher using the Azure Network Watcher data source.
Link to standard data source instructions <p>The following types of flow logs can be ingested from Azure Network Watcher:</p><ul><li>Network security group (NSG) flow logs</li><li>Virtual network (VNet) flow logs</li></ul><p>For more information, see Ingest network flow logs from Microsoft Azure Network Watcher.</p>