Network Watcher sends flow logs to Log Analytics

# Enable NSG flow logs and send to Log Analytics
resource "azurerm_network_watcher_flow_log" "<example_resource_name>" {
  network_watcher_name       = "<example_resource_name>"
  resource_group_name        = "<example_resource_name>"
  network_security_group_id  = "<example_resource_id>"
  storage_account_id         = "<example_resource_id>"

  enabled = true # CRITICAL: turns on flow logs

  traffic_analytics {        
    enabled                = true # CRITICAL: sends flow logs to Log Analytics
    workspace_id           = "<example_resource_id>"      # workspace_id (GUID) or use data source
    workspace_region       = "<REGION>"
    workspace_resource_id  = "<example_resource_id>"      # Log Analytics workspace resource ID
  }
}

// Enable NSG flow logs and send to Log Analytics
resource flowLog 'Microsoft.Network/networkWatchers/flowLogs@2022-09-01' = {
  name: '<example_resource_name>/<example_resource_name>'
  location: '<REGION>'
  properties: {
    enabled: true // CRITICAL: turns on flow logs
    targetResourceId: '<example_resource_id>' // NSG resource ID
    storageId: '<example_resource_id>' // required for NSG flow logs
    flowAnalyticsConfiguration: {
      networkWatcherFlowAnalyticsConfiguration: {
        enabled: true // CRITICAL: sends flow logs to Log Analytics
        workspaceResourceId: '<example_resource_id>' // Log Analytics workspace resource ID
      }
    }
  }
}