Skip to content

Commit 6a3d05d

Browse files
committed
tweaks
1 parent 9703081 commit 6a3d05d

File tree

1 file changed

+13
-7
lines changed

1 file changed

+13
-7
lines changed

articles/network-watcher/vnet-flow-logs-policy.md

Lines changed: 13 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,17 @@
11
---
2-
title: Manage virtual network flow logs using Azure Policy
2+
title: Audit and deploy virtual network flow logs using Azure Policy
33
titleSuffix: Azure Network Watcher
44
description: Learn how to use Azure Policy built-in policies to audit virtual networks and deploy Azure Network Watcher virtual network flow logs.
55
author: halkazwini
66
ms.author: halkazwini
77
ms.service: network-watcher
88
ms.topic: how-to
9-
ms.date: 05/03/2024
9+
ms.date: 05/07/2024
10+
11+
#CustomerIntent: As an Azure administrator, I want to use Azure Policy to audit and deploy virtual network flow logs.
1012
---
1113

12-
# Manage virtual network flow logs using Azure Policy
14+
# Audit and deploy virtual network flow logs using Azure Policy
1315

1416
Azure Policy helps you enforce organizational standards and assess compliance at scale. Common use cases for Azure Policy include implementing governance for resource consistency, regulatory compliance, security, cost, and management. To learn more about Azure policy, see [What is Azure Policy?](../governance/policy/overview.md) and [Quickstart: Create a policy assignment to identify noncompliant resources](../governance/policy/assign-policy-portal.md).
1517

@@ -125,15 +127,19 @@ To assign the *deployIfNotExists* policy, follow these steps:
125127

126128
:::image type="content" source="./media/vnet-flow-logs-policy/deploy-policy-compliance-details.png" alt-text="Screenshot that shows the noncompliant virtual networks based on the deploy policy." lightbox="./media/vnet-flow-logs-policy/deploy-policy-compliance-details.png":::
127129

128-
The policy takes some time to evaluate and deploy flow logs for all noncompliant virtual networks in the specified scope.
130+
> [!NOTE]
131+
> The policy takes some time to evaluate virtual networks in the specified scope and deploy flow logs for the noncompliant virtual networks.
132+
133+
1. Go to **Flow logs** under **Logs** in **Network Watcher** to see the flow logs that were deployed by the policy.
134+
135+
:::image type="content" source="./media/vnet-flow-logs-policy/flow-logs.png" alt-text="Screenshot that shows the flow logs list in Network Watcher." lightbox="./media/vnet-flow-logs-policy/flow-logs.png":::
129136

130137
1. Verify that there are no noncompliant virtual networks in the policy compliance page.
131138

132139
:::image type="content" source="./media/vnet-flow-logs-policy/deploy-policy-compliance-details-compliant.png" alt-text="Screenshot that shows there aren't any noncompliant virtual networks after the deployment policy deployed flow logs in the defined scope." lightbox="./media/vnet-flow-logs-policy/deploy-policy-compliance-details-compliant.png":::
133140

134-
You can view the deployed virtual network flow logs by going to **Flow logs** under **Logs** in **Network Watcher**.
135-
136-
:::image type="content" source="./media/vnet-flow-logs-policy/flow-logs.png" alt-text="Screenshot that shows the flow logs list in Network Watcher." lightbox="./media/vnet-flow-logs-policy/flow-logs.png":::
141+
> [!NOTE]
142+
> It can take up to 24 hours to see that there are no more noncompliant virtual networks. For more information, see [Understand evaluation outcomes](../governance/policy/overview.md#understand-evaluation-outcomes).
137143
138144
## Related content
139145

0 commit comments

Comments
 (0)