Your company runs a hub-and-spoke network with dozens of NSGs applied at both subnet and NIC levels across multiple VNets. The security team wants a single, future-proof logging solution that captures IP traffic flow data for an entire virtual network without having to enable and maintain a separate log configuration on each NSG. They also want the logs to continue working even if an NSG is later removed from a subnet. Which solution should you implement?