---
title: >-
  'Create or Update Network Security Group' activity log alert should be
  configured
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > 'Create or Update Network Security
  Group' activity log alert should be configured
---

# 'Create or Update Network Security Group' activity log alert should be configured
 
## Description{% #description %}

To improve the detection of suspicious activity and gain insights into network access changes, it is recommended to create an Activity Log Alert specifically for the "Create or Update Network Security Group" event. By monitoring these events, it becomes easier to detect and respond to any unauthorized modifications made to network security groups, leading to a quicker response time and enhanced security measures.

## Remediation{% #remediation %}

### From the console{% #from-the-console %}

1. Navigate to the **Monitor** blade.
1. Select **Alerts** > **Create** > **Alert rule**.
1. Under **Filter by subscription**, choose a subscription.
1. Under **Filter by resource type**, select **Network security groups**.
1. Under **Filter by location**, select **All**.
1. From the results, select the subscription, then click **Done**.
1. Select the **Condition** tab.
1. Under Signal name, click Delete **Create or Update Network Security Group (Microsoft.Network/networkSecurityGroups)**.
1. Select the **Actions** tab.
1. To use an existing action group, click **Select action groups**. To create a new action group, click **Create action group**. Fill out the appropriate details for the selection.
1. Click the **Details** tab.
1. Select a **Resource group**, then provide an **Alert rule name** and an optional **Alert rule description**.
1. Click **Review + create**.
1. Click **Create**.