Application Gateway Security Logging Enabled

MEDIUM
Source
CloudSploit
ID
application-gateway-security-logging-enabled

Application Gateway Security Logging Enabled

Ensures that Application Gateway Access and Firewall logs are enabled.

Application Gateway access logs helps to analyze important information including the caller's IP, requested URL, response latency, return code, and bytes in and out. Web application firewall (WAF) logs can be used to detect potential attacks, and false positive detections that might indicate legitimate requests that the WAF blocked.

Modify Application Gateway and add diagnostic settings for Access and Firewall Logs.