Control: Azure > CIS v5.0 > 6 - Management and Governance Services > 6.01 - Logging and Monitoring > 6.01.01 - Configuring Diagnostic Settings > 6.01.01.07 - Ensure that virtual network flow logs are captured and sent to Log Analytics

Configures auditing against a CIS Benchmark item.

Level: 2

Ensure that VNet Flow logs are captured and sent to Log Analytics for monitoring and analysis.

Virtual Network Flow Logs provide valuable insight into the flow of traffic within your virtual network and feed into both Azure Monitor and Azure Sentinel (if in use), permitting the generation of visual flow diagrams to aid with analyzing for lateral movement, etc. This is an enhancement over NSG Flow Logs as it captures traffic at the virtual network level rather than just network security group level.

Resource Types

This control targets the following resource types:

Azure > Subscription

Policies

This control type relies on these other policies when running actions:

In Your Workspace

Developers

Control Type URI

tmod:@turbot/azure-cisv5-0#/control/types/r06010107

Category URI

tmod:@turbot/cis#/control/categories/v070603

GraphQL

query controlType(id: "tmod:@turbot/azure-cisv5-0#/control/types/r06010107") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/azure-cisv5-0#/control/types/r06010107'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/azure-cisv5-0#/control/types/r06010107"