# Ingest Flow Logs

Configure network flow logs to be ingested by Fusion by following the instructions below. If this is your first time configuring Fusion, the [Quick Start Guides](/quick-start/readme.md) for AWS, Azure, & GCP are the best place to start for end-to-end steps.

If you want to ingest NetFlow, sFlow, or IPFIX from network devices, see [Ingesting NetFlow, sFlow, & IPFIX to Fusion](https://docs.netography.com/ingest-network-traffic-logs/netflow-sflow).

## Flow Log Sources <a href="#flow-log-sources" id="flow-log-sources"></a>

### AWS - VPC Flow Logs <a href="#aws---vpc-flow-logs" id="aws---vpc-flow-logs"></a>

* [Quickstart: AWS](/quick-start/quickstart-aws.md) (VPC flow logs, Route 53 DNS logs, & context enrichment)
* [AWS VPC via S3 Setup (CloudFormation method)](/ingest-network-traffic-logs/flow-logs/aws-vpc-flow-logs-via-s3-aws-cloudformation-setup-method-recommended.md)
* [AWS VPC via S3 Setup (AWS Console method)](/ingest-network-traffic-logs/flow-logs/aws-vpc-flow-logs-via-s3-aws-console-setup-method.md)
* [AWS VPC via Kinesis Setup](/ingest-network-traffic-logs/flow-logs/aws-vpc-flow-logs-via-kinesis.md)

### AWS - Transit Gateway Flow Logs <a href="#aws---transit-gateway-flow-logs" id="aws---transit-gateway-flow-logs"></a>

* [AWS Transit Gateway Flow Logs](/ingest-network-traffic-logs/flow-logs/aws-transit-gateway-flow-logs.md)

### Azure - VNet Flow Logs <a href="#azure---vnet-flow-logs" id="azure---vnet-flow-logs"></a>

* [Quickstart: Azure](/quick-start/quickstart-azure.md) (VNet flow logs & context enrichment)
* [Azure Virtual Network (VNet) Flow Log Setup](/ingest-network-traffic-logs/flow-logs/azure-vnet-flow-log-configuration.md) (Azure Console method)

### Azure - NSG Flow Logs <a href="#azure---nsg-flow-logs" id="azure---nsg-flow-logs"></a>

* [Azure NSG Setup (Azure Console method)](/ingest-network-traffic-logs/flow-logs/azure-network-security-group-flow-logs-azure-console-setup-method.md)
* [Azure NSG Setup (Resource Manager method)](/ingest-network-traffic-logs/flow-logs/azure-network-security-group-flow-logs-azure-resource-manager-setup-method.md)

### GCP - VPC Flow Logs <a href="#gcp---vpc-flow-logs" id="gcp---vpc-flow-logs"></a>

* [Quickstart: GCP](/quick-start/quickstart-gcp.md) (VPC flow logs, Cloud DNS logs, & context enrichment)
* [GCP via Pub/Sub Setup](/ingest-network-traffic-logs/flow-logs/gcp-flow-logs-via-pubsub.md)

### IBM Cloud - VPC Flow Logs <a href="#ibm-cloud---vpc-flow-logs" id="ibm-cloud---vpc-flow-logs"></a>

* [IBM Cloud via Cloud Object Storage Setup](/ingest-network-traffic-logs/flow-logs/ibm-cloud-flow-logs-via-cloud-object-storage.md)

### Oracle Cloud - VCN Flow Logs <a href="#oracle-cloud---vcn-flow-logs" id="oracle-cloud---vcn-flow-logs"></a>

* [Oracle Cloud Infrastructure via Cloud Object Storage Setup](/ingest-network-traffic-logs/flow-logs/oracle-cloud-infrastructure-flow-logs-via-cloud-object-storage.md)

### Onboarding Automation <a href="#onboarding-automation" id="onboarding-automation"></a>

{% hint style="info" %}
**🤖Using Terraform to automate onboarding**

Access Netography's Terraform automation at our GitHub repo: <https://github.com/netography/neto-onboarding>. For access to the repo, email <support@netography.com> with your GitHub ID or with a request for access to the latest release package.

Netography provides a Terraform project, `neto-onboarding,` that provides Netography Fusion Cloud Onboarding Automation for AWS Organizations, Azure Tenants, and GCP Organizations.

This automation provides the following capabilties, which you can use in whole or part:

* Enables and configure AWS VPC flow logs, Azure VNet flow logs, and GCP VPC flow logs based on a simple policy and tags that defines which VPC/VNet are in scope.
* Deploy all the infrastructure required to integrate to Fusion across multiple accounts (AWS), subscriptions (Azure), and projects (GCP) in a single deployment
* Adds VPCs/VNets configured for flow logging to Netography Fusion as traffic sources.
* Deploys a single AWS Lambda function, Azure Function, or Google Function that provides context enrichment across all the accounts/subscriptions/projects as an outbound push from your cloud to the Fusion API, eliminating the need to add context integrations from the Fusion portal, to grant Netography permissions to directly enumerate resource properties, or to add individual context integrations in Fusion for each cloud account.
* Monitor for VPC/VNet changes and trigger enabling and configuring flow logs, and onboarding to Fusion new VPCs/VNets that are in scope, and offboarding VPCs/VNets that are removed or no longer in scope.
  {% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.fusion.vectra.ai/ingest-network-traffic-logs/flow-logs.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.