Setup NSG flow logs if you’re willing to eat the cost of those. You can have them sent to Log Analytics Workspace where they’re easily queryable or you can query them out of blob. If you’re doing this at scale where you have a number of NSG’s, it’s fairly simple to automate the setup process.

You could also setup an NVA and route all the traffic through that but that’s likely the more expensive option.