Azure NSGv2 Flow Logs Integration: April 2019 Update
Kentik is on the fast track to expand cloud visibility for both on-prem infrastructure and public clouds. After completing integrations with Google Cloud Platform and Amazon Web Services VPC Flow Logs last year, Kentik now also turns Azure NSG Flow Logs into powerful real-time traffic insights. For more detail, read our new Solution Brief about Azure NSG Flow Logs for Kentik.
Azure NSG Flow Logs allow you to get information about ingress and egress IP traffic through a Network Security Group (NSG) on a per-rule basis. The onboarding workflow is straightforward—to export Azure NSG Flow Logs to the Kentik platform, just follow these seven steps:
- Gather Azure Information: This might include Azure Role, Azure Subscription ID, Resource Group and Location from your Azure instance. The main goal is to make sure that you have the essential information handy and have the right permissions granted for the exporting.
- Add Azure Cloud in Kentik and Complete the Settings for Azure Flow Log Export:
- Authorize Access to Azure: Enter the Subscription ID of the Azure instance from which Kentik’s NSG Flow Exporter application will export flow logs and authorize access for the app.
- Specify Azure Resources: Enter the Resource Group Name and Location, as well as the Storage Account where flow logs will be generated.
- Configure Flow Log Export to export flow logs to a Storage Account from the specified Resource Group and Location. (Kentik auto-generates a script for this.)
- Validate the Configuration.
For detailed configuration information, please see the Kentik for Azure topic in the Kentik Knowledge Base.
With the integration of all three major public clouds (GCP, AWS, Azure), you can now have a single-pane view of traffic that flows in/out of each cloud platform. The following example shows an egress traffic overview for all the clouds in one graph so you can see your business footprint for each cloud and compare.