SOLVED
Home

Alerting for changes to NSG.

%3CLINGO-SUB%20id%3D%22lingo-sub-812673%22%20slang%3D%22en-US%22%3EAlerting%20for%20changes%20to%20NSG.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-812673%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I%20am%20searching%20for%20a%20way%20to%20be%20alerted%20when%20a%20NSG%20change%20be%20done%2C%20do%20you%20have%20any%20idea%20to%20follow%3F%20thank%20you%20for%20your%20help!%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-812673%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIdentity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%20Center%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-814225%22%20slang%3D%22en-US%22%3ERe%3A%20Alerting%20for%20changes%20to%20NSG.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-814225%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20can%20accomplish%20this%20by%20creating%20an%20alert%20from%20the%20activity%20log.%20By%20default%20it%20only%20keeps%2090%20days.%20You%20can%20extend%20that%20by%20pushing%20them%20into%20a%20storage%20account.%20See%20the%20attached%20pictures%20below.%20You%20will%20navigate%20to%20the%20Network%20Security%20Group%20within%20the%20portal%20go%20to%20the%20activity%20log%20and%20select%20the%20activity.%20From%20there%20you%20can%20create%20the%20alert%20you%20are%20looking%20for%20and%20send%20it%20to%20the%20appropriate%20action%20group.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F127741i785056492C028A61%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22clipboard_image_2.png%22%20title%3D%22clipboard_image_2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F149336%22%20target%3D%22_blank%22%3E%40David%20P%C3%A9rez%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-820081%22%20slang%3D%22en-US%22%3ERe%3A%20Alerting%20for%20changes%20to%20NSG.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-820081%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Bryan!%20after%20a%20while%20it%20is%20working%2C%20as%20a%20tip%20you%20need%20to%20wait%20hours%20not%20minutes%20for%20the%20alerting%20rule%20working%2C%20I%20did%20the%20configuration%20several%20times%20and%20was%20thinking%20did%20not%20work%2C%20until%20stop%20and%20wait.%20Thank%20you%20for%20your%20help!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-820115%22%20slang%3D%22en-US%22%3ERe%3A%20Alerting%20for%20changes%20to%20NSG.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-820115%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20sharing%20that%20tip!%20That%20is%20great%20to%20keep%20in%20mind%20when%20creating%20alerts!%20I%20am%20very%20happy%20to%20hear%20it%20is%20up%20and%20running%20for%20you%20know.%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F149336%22%20target%3D%22_blank%22%3E%40David%20P%C3%A9rez%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-820435%22%20slang%3D%22en-US%22%3ERe%3A%20Alerting%20for%20changes%20to%20NSG.%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-820435%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Again%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F183000%22%20target%3D%22_blank%22%3E%40Bryan%20Haslip%3C%2FA%3E%26nbsp%3BMay%20be%20you%20can%20help%20me%2C%20I%20have%20the%20alert%20working%20by%20this%20way%3A%20If%20I%20make%20a%20change%20related%20with%20any%20NSG%20like%20delete%2C%20create%20I%20receive%20an%20email%20alerting%20about%20it%20but%20Adding%2C%20deleting%2C%20modifying%20inbound%20security%20rules%20or%20outbound%20security%20rules%20in%20any%20of%20the%20NSG%20there%20is%20not%20notification%20email%20about%20it%2C%20any%20idea%20will%20be%20apprecciated!%3C%2FP%3E%3C%2FLINGO-BODY%3E
David Pérez
Occasional Contributor

Hi, I am searching for a way to be alerted when a NSG change be done, do you have any idea to follow? thank you for your help! 

4 Replies
Solution

You can accomplish this by creating an alert from the activity log. By default it only keeps 90 days. You can extend that by pushing them into a storage account. See the attached pictures below. You will navigate to the Network Security Group within the portal go to the activity log and select the activity. From there you can create the alert you are looking for and send it to the appropriate action group.

clipboard_image_2.png

 

  @David Pérez 

 

Hi Bryan! after a while it is working, as a tip you need to wait hours not minutes for the alerting rule working, I did the configuration several times and was thinking did not work, until stop and wait. Thank you for your help!

Thank you for sharing that tip! That is great to keep in mind when creating alerts! I am very happy to hear it is up and running for you know. @David Pérez 

Hi Again @Bryan Haslip May be you can help me, I have the alert working by this way: If I make a change related with any NSG like delete, create I receive an email alerting about it but Adding, deleting, modifying inbound security rules or outbound security rules in any of the NSG there is not notification email about it, any idea will be apprecciated!

Related Conversations
What's new in Edge insider Canary Version 79.0.284
HotCakeX in Discussions on
20 Replies
Monitoring & Ingestion
JK_UK in Azure Log Analytics on
2 Replies
A problem with the Zoom level of a Tab
Tavory in Discussions on
9 Replies
Some of the latest Edge Canary changes
HotCakeX in Discussions on
0 Replies