SOLVED

Alerting for changes to NSG.

%3CLINGO-SUB%20id%3D%22lingo-sub-812673%22%20slang%3D%22en-US%22%3EAlerting%20for%20changes%20to%20NSG.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-812673%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I%20am%20searching%20for%20a%20way%20to%20be%20alerted%20when%20a%20NSG%20change%20be%20done%2C%20do%20you%20have%20any%20idea%20to%20follow%3F%20thank%20you%20for%20your%20help!%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-812673%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIdentity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%20Center%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-814225%22%20slang%3D%22en-US%22%3ERe%3A%20Alerting%20for%20changes%20to%20NSG.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-814225%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20accomplish%20this%20by%20creating%20an%20alert%20from%20the%20activity%20log.%20By%20default%20it%20only%20keeps%2090%20days.%20You%20can%20extend%20that%20by%20pushing%20them%20into%20a%20storage%20account.%20See%20the%20attached%20pictures%20below.%20You%20will%20navigate%20to%20the%20Network%20Security%20Group%20within%20the%20portal%20go%20to%20the%20activity%20log%20and%20select%20the%20activity.%20From%20there%20you%20can%20create%20the%20alert%20you%20are%20looking%20for%20and%20send%20it%20to%20the%20appropriate%20action%20group.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F127741i785056492C028A61%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_2.png%22%20title%3D%22clipboard_image_2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F149336%22%20target%3D%22_blank%22%3E%40David%20P%C3%A9rez%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-820081%22%20slang%3D%22en-US%22%3ERe%3A%20Alerting%20for%20changes%20to%20NSG.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-820081%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Bryan!%20after%20a%20while%20it%20is%20working%2C%20as%20a%20tip%20you%20need%20to%20wait%20hours%20not%20minutes%20for%20the%20alerting%20rule%20working%2C%20I%20did%20the%20configuration%20several%20times%20and%20was%20thinking%20did%20not%20work%2C%20until%20stop%20and%20wait.%20Thank%20you%20for%20your%20help!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-820115%22%20slang%3D%22en-US%22%3ERe%3A%20Alerting%20for%20changes%20to%20NSG.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-820115%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20sharing%20that%20tip!%20That%20is%20great%20to%20keep%20in%20mind%20when%20creating%20alerts!%20I%20am%20very%20happy%20to%20hear%20it%20is%20up%20and%20running%20for%20you%20know.%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F149336%22%20target%3D%22_blank%22%3E%40David%20P%C3%A9rez%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-820435%22%20slang%3D%22en-US%22%3ERe%3A%20Alerting%20for%20changes%20to%20NSG.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-820435%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Again%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F183000%22%20target%3D%22_blank%22%3E%40Bryan%20Haslip%3C%2FA%3E%26nbsp%3BMay%20be%20you%20can%20help%20me%2C%20I%20have%20the%20alert%20working%20by%20this%20way%3A%20If%20I%20make%20a%20change%20related%20with%20any%20NSG%20like%20delete%2C%20create%20I%20receive%20an%20email%20alerting%20about%20it%20but%20Adding%2C%20deleting%2C%20modifying%20inbound%20security%20rules%20or%20outbound%20security%20rules%20in%20any%20of%20the%20NSG%20there%20is%20not%20notification%20email%20about%20it%2C%20any%20idea%20will%20be%20apprecciated!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hi, I am searching for a way to be alerted when a NSG change be done, do you have any idea to follow? thank you for your help! 

4 Replies
best response confirmed by Stanislav Zhelyazkov (MVP)
Solution

You can accomplish this by creating an alert from the activity log. By default it only keeps 90 days. You can extend that by pushing them into a storage account. See the attached pictures below. You will navigate to the Network Security Group within the portal go to the activity log and select the activity. From there you can create the alert you are looking for and send it to the appropriate action group.

clipboard_image_2.png

 

  @David Pérez 

 

Hi Bryan! after a while it is working, as a tip you need to wait hours not minutes for the alerting rule working, I did the configuration several times and was thinking did not work, until stop and wait. Thank you for your help!

Thank you for sharing that tip! That is great to keep in mind when creating alerts! I am very happy to hear it is up and running for you know. @David Pérez 

Hi Again @Bryan Haslip May be you can help me, I have the alert working by this way: If I make a change related with any NSG like delete, create I receive an email alerting about it but Adding, deleting, modifying inbound security rules or outbound security rules in any of the NSG there is not notification email about it, any idea will be apprecciated!