Basic Authentication and Exchange Online – June 2021 Update

Slawomir_Lipski thanks for the follow up! That's correct - we generally recommend that customers use Azure Event Hubs, Azure Storage, or Azure Monitor to export and analyze large amounts of log data. 

Exporting sign-in logs data from Azure AD requires a premium license for your Azure AD tenant. You can use the following methods to export logs:

• In general, we recommend customers prioritize data export to Azure Event Hubs, Azure Storage, or Azure Monitor. Those export pathways are all capable of handling the load even from customer tenants with hundreds of thousands of users. https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Freports-monitoring%2Fhowto-integrate-activity-logs-with-log-analytics&data=04%7C01%7CBen.Siler%40microsoft.com%7C6bdba1ecb45144c389ab08d937f3fc53%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637602343336147247%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=NXlmMrGCZQ%2FtA9jvy9n7aJzYB3zb1B8Zl%2F6urFHywzQ%3D&reserved=0
• Customers can also use Graph APIs to export sign in logs, but we recommend customers implement the recommended MS Graph paging logic to ensure they can pull all their logs. https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Freports-monitoring%2Fquickstart-access-log-with-graph-api&data=04%7C01%7CBen.Siler%40microsoft.com%7C6bdba1ecb45144c389ab08d937f3fc53%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637602343336157242%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=ozXsdAE6Mpt%2B9tVeP1D3T86vHCOp9GfSfn9M7AusHd4%3D&reserved=0
• Customers can also download logs, but the amount of data in the sign in logs can cause browser timeouts for large customers. Currently, in browser downloads are limited to 100k events.