Azure Network Watcher

Configure Azure Network Watcher flow-log collection for Cortex XDR.

You can configure collecting Azure Network Watcher logs using a standard data source:

Azure Network Watcher vendor	Description
Standard data source overview	Forward different types of flow logs to Cortex XDR from Azure Network Watcher using the Azure Network Watcher data source.
Link to standard data source instructions	The following types of flow logs can be ingested from Azure Network Watcher: Network security group (NSG) flow logs Virtual network (VNet) flow logs For more information, see Ingest network flow logs from Microsoft Azure Network Watcher.