The NSG Flow logs are part of and has the following characteristics: Captured at transport layer $($layer $4)$Collected in $1-$min intervalsWritten in JSONEach log record will include network interface, $5-$tuple info, and traffic decision $($allow$/$deny$)$Retained for $1$ year