The logs are stored as and organized in a strict folder hierarchy based on Subscription ID, Resource Group, NSG Name, and Date. Navigate to Storage accounts in the Azure Portal. Select the account configured for your flow logs. Under Data storage , click Containers .
Open the container named .
For batch downloads or easier navigation, is the recommended tool. Connect your Azure account to the desktop application. Browse to your storage account's Blob Containers . download nsg flow logs azure
Microsoft recommends migrating to before June 30, 2025, to ensure continued support. VNet flow logs provide broader coverage and are stored in a different container: insights-logs-flowlogflowevent . Read Flow Logs - Azure Network Watcher
Download the file, which contains one hour of traffic data. 2. Download via Azure Storage Explorer The logs are stored as and organized in
Follow the path: resourceId=/SUBSCRIPTIONS/.../y=YYYY/m=MM/d=DD/h=HH/m=00/ .
az storage blob download --container-name insights-logs-networksecuritygroupflowevent --name --file --account-name Under Data storage , click Containers
To download in Azure, you must access the Azure Storage account where the logs are archived, typically within the insights-logs-networksecuritygroupflowevent container. While NSG flow logs will be retired on September 30, 2027 , existing records remain accessible in storage according to your retention policy. 1. Locate Flow Logs in the Azure Portal