Forum Discussion
No results when creating alert rule
I've been following this documentation for creating emergency users: https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/security-emergency-access#monitor-sign-in-and-audit-lo...
Please locate the cause by following steps:
-
Check Alert Processing Rule:
-
Email Notifications:
-
Additional Troubleshooting such as firewall rules, etc.
The sign in logs aren't streamed into the log analytics workspace by default. Once I explicitly set that up, it started working, albeit not right away (i.e. it started working the next morning).