Forum Discussion

Copper Contributor

Jul 05, 2019

UserLoggedIn events not found in Azure Audit log for about a week

When I search for UserLoggedIn events in my Office 365 Tenant, I'm unable to find any audit records for the last 7 days. Whereas all our users have been logging in and out. I've tested one of our tes...

Auditing

microsoft 365 admin center

office 365

ankit shukla

Iron Contributor

Jul 25, 2019

Tony Oscar UserLoggedin events have been problematic and is still in a stage where it cant be called reliable.

Best is to use Azure AD Login reports from AAD. you may additionally use PowerShell to fetch this -

https://gallery.technet.microsoft.com/scriptcenter/Pull-Azure-AD-Audit-Report-ae78ecaa

https://gallery.technet.microsoft.com/scriptcenter/Pull-Azure-AD-Sign-In-3fead683

Cheers !!

Ankit Shukla