A network security group (NSG) enables you to filter inbound traffic to, and outbound traffic from, a virtual machine (VM). You can log network traffic that flows through an NSG with Network Watcher's NSG flow log capability. Steps include: * Create a VM with a network security group * Enable Network Watcher and register the Microsoft.Insights provider * Enable a traffic flow log for an NSG, using Network Watcher's NSG flow log capability * Download logged data * View logged data Reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal