Query: network_watcher_flow_log_retention_90_days

SELECT
  fl.id AS resource,
  CASE
    WHEN fl.enabled AND (fl.retention_policy_days >= 90 OR fl.retention_policy_days = 0) THEN 'ok'
    ELSE 'alarm'
  END AS status,
  CASE
    WHEN NOT fl.enabled THEN fl.name || ' flow log is not enabled.'
    WHEN fl.retention_policy_days = 0 THEN fl.name || ' flow log retention is set to indefinite.'
    WHEN fl.retention_policy_days >= 90 THEN fl.name || ' flow log retention is set to ' || fl.retention_policy_days || ' days.'
    ELSE fl.name || ' flow log retention is set to ' || fl.retention_policy_days || ' days.'
  END AS reason,
  fl.subscription_id,
  fl.region
FROM
  azure_network_watcher_flow_log fl;