Azure Network Watcher

Use Azure Network Watcher data with Cortex XSIAM.

You can configure collecting Azure Network Watcher logs using a standard data source:

Collection Method	Description
Standard data source overview	Forward different types of flow logs to Cortex XSIAM from Azure Network Watcher using the Azure Network Watcher data source.
Link to standard data source instructions	The following types of flow logs can be ingested from Azure Network Watcher: Network security group (NSG) flow logs Virtual network (VNet) flow logs For more information, see Ingest network flow logs from Microsoft Azure Network Watcher.