Set-AzureRmNetworkWatcherConfigFlowLog

Set-AzureRmNetworkWatcherConfigFlowLog.ps1

$Region = "westus2"
$NsgName = "vyos-nsg"
$NsgRsgName = "virtualwan"
$LogstorageRsgName = "azs"
$LogStorageName = "azsdiag457"

$NetworkWatcherName = "NetworkWatcher_" + $Region

$NW = Get-AzurermNetworkWatcher -ResourceGroupName NetworkWatcherRG -Name $NetworkWatcherName
$nsg = Get-AzureRmNetworkSecurityGroup -ResourceGroupName $NsgRsgName -Name $NsgName
$storageAccount = Get-AzureRmStorageAccount -ResourceGroupName $LogstorageRsgName -Name $LogStorageName
$res = Get-AzureRmNetworkWatcherFlowLogStatus -NetworkWatcher $NW -TargetResourceId $nsg.Id

if ( $res.Enabled -eq $false ){
    Set-AzureRmNetworkWatcherConfigFlowLog -NetworkWatcher $NW -TargetResourceId $nsg.Id `
                                           -StorageAccountId $storageAccount.Id -EnableFlowLog $true `
                                           -EnableRetention $True -RetentionInDays 365
}